[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSQxIJLJCBOoFNVfu90YY9iEJOfHz-dZ2cqUs6r1F-y0":3,"g5a-ex:avaya\u002Fcommunication_manager@*":152,"g5a-family:avaya\u002Fcommunication_manager":154},{"success":4,"data":5},true,{"product":6,"versions":60,"topVulnerabilitiesByEpss":79,"kevVulnerabilities":129,"seoMetadata":130,"meta":149},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":59},"avaya","communication_manager",18,16,0,"2009-04-10",[14,18,20,22,24,27,30,32,34,37,40,43,46,48,50,53,55,57],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.1",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"1.3.1",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.1",{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"3.1",9,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"3.1.1",11,{"version":31,"cve_count":29,"kev_count":11,"has_kev":17},"3.1.2",{"version":33,"cve_count":29,"kev_count":11,"has_kev":17},"3.1.3",{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},"3.1.4",10,{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},"3.1.5",8,{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},"4.0",7,{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},"4.0.1",6,{"version":47,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.2",{"version":49,"cve_count":42,"kev_count":11,"has_kev":17},"4.0.3",{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},"5.0",5,{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},"5.1",{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},"5.1.1",{"version":58,"cve_count":16,"kev_count":11,"has_kev":17},"5.1.2","Communication Manager by Avaya is a technology product with 18 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":29,"kev_count":11,"has_kev":17},{"version":33,"cve_count":29,"kev_count":11,"has_kev":17},{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},{"version":47,"cve_count":16,"kev_count":11,"has_kev":17},{"version":49,"cve_count":42,"kev_count":11,"has_kev":17},{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},{"version":58,"cve_count":16,"kev_count":11,"has_kev":17},[80,88,94,98,101,106,110,113,119,124],{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":85,"severity":86,"isKev":17,"epssScore":87},"CVE-2004-1082","mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.","2004-02-03",7.5,"v2","High",0.07583,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":26,"cvssVersion":85,"severity":92,"isKev":17,"epssScore":93},"CVE-2008-5709","Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.","2008-12-24","Critical",0.03349,{"cveId":95,"description":96,"publishedDate":12,"cvssScore":26,"cvssVersion":85,"severity":92,"isKev":17,"epssScore":97},"CVE-2008-6711","Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to \"viewing system logs.\"",0.02445,{"cveId":99,"description":100,"publishedDate":12,"cvssScore":26,"cvssVersion":85,"severity":92,"isKev":17,"epssScore":97},"CVE-2008-6709","Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of \"local data viewing or restoring parameters.\"",{"cveId":102,"description":103,"publishedDate":12,"cvssScore":104,"cvssVersion":85,"severity":86,"isKev":17,"epssScore":105},"CVE-2008-6706","Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts \"subscriber table passwords,\" (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts \"subscriber table passwords.\"",7.8,0.02261,{"cveId":107,"description":108,"publishedDate":12,"cvssScore":26,"cvssVersion":85,"severity":92,"isKev":17,"epssScore":109},"CVE-2008-6708","Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of \"data viewing or restoring parameters.\"",0.02098,{"cveId":111,"description":112,"publishedDate":12,"cvssScore":26,"cvssVersion":85,"severity":92,"isKev":17,"epssScore":109},"CVE-2008-6710","Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to \"configuring data viewing or restoring credentials.\"",{"cveId":114,"description":115,"publishedDate":116,"cvssScore":45,"cvssVersion":85,"severity":117,"isKev":17,"epssScore":118},"CVE-2007-1490","Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors (aka \"shell command injection\").","2007-03-16","Medium",0.01518,{"cveId":120,"description":121,"publishedDate":12,"cvssScore":122,"cvssVersion":85,"severity":117,"isKev":17,"epssScore":123},"CVE-2008-6707","The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an \"unnecessary default application,\" (4) unspecified scripts in the states folder, (5) an unspecified \"default application\" that lists server configuration, and (6) \"full system help.\"",6.4,0.01498,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":85,"severity":117,"isKev":17,"epssScore":123},"CVE-2008-6573","Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 (1) allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager (SPIM) in the web interface; and allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to (2) permissions for SPIM profiles in the web interface and (3) a crafted SIP request to the SIP server.","2009-04-01",6.8,[],{"title":131,"metaDescription":132,"keywords":133,"structuredData":134},"Communication Manager by Avaya - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communication Manager by Avaya covering 18 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communication Manager vulnerabilities, Communication Manager security, Communication Manager CVE, Avaya Communication Manager, Communication Manager threat intelligence, Avaya security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":135,"@type":136,"name":137,"description":132,"url":138,"manufacturer":139,"applicationCategory":143,"softwareVersion":144,"mainEntity":145},"https:\u002F\u002Fschema.org","SoftwareApplication","Communication Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Favaya\u002Fcommunication_manager",{"@type":140,"name":141,"url":142},"Organization","Avaya","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Favaya","Security Software","18 versions tracked",{"@type":146,"name":147,"description":148,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communication Manager Security Vulnerabilities","Security vulnerabilities affecting Communication Manager by Avaya",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":150,"apiVersion":151},"2026-10-17T13:04:15.782Z","3.0",{"rows":153,"total":11,"capped":17,"failed":11},[],[]]