CVE-2007-1367

no score yetEPSS 1.1%

avaya: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
Published: 2007-03-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

avaya:s8300
avaya:s8500
avaya:s8700
avaya:s8710

References

http://secunia.com/advisories/24397
http://support.avaya.com/elmodocs2/security/ASA-2007-064.htm
http://www.osvdb.org/33297
http://www.securityfocus.com/bid/22866
http://secunia.com/advisories/24397

Check your stack JSON