CVE-2012-3811

no score yetEPSS 63%

Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.

EPSS: 63% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
Published: 2012-07-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

avaya:ip_office_customer_call_reporter

References

http://zerodayinitiative.com/advisories/ZDI-12-106/
https://downloads.avaya.com/css/P8/documents/100164021
http://zerodayinitiative.com/advisories/ZDI-12-106/
https://downloads.avaya.com/css/P8/documents/100164021

Check your stack JSON