[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f20-uhDlycOOnEuDn1asY9Gqw5IwGaFijJlBMfFUjNsI":3,"g5a-risk:CVE-2008-6707":251},{"success":4,"data":5,"meta":249},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":30,"references":69,"referencesCount":173,"weaknesses":174,"weaknessesCount":182,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":183,"seoMetadata":184,"configurations":209,"relatedVendorCves":247,"notableEvents":248},"CVE-2008-6707","What is CVE-2008-6707?","The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an \"unnecessary default application,\" (4) unspecified scripts in the states folder, (5) an unspecified \"default application\" that lists server configuration, and (6) \"full system help.\"","The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authenticat...","2009-04-10T22:00:00.67","2026-06-16T23:02:48.86",6.4,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"MEDIUM",10,4.9,false,[],0.01498,[34,34,34,34,34,34,34],"Medium",[38,43,46,49,52,55,57,60,63,66],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"avaya","sip_enablement_services","3.0","cpe:2.3:a:avaya:sip_enablement_services:3.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"3.1","cpe:2.3:a:avaya:sip_enablement_services:3.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"3.1.1","cpe:2.3:a:avaya:sip_enablement_services:3.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":50,"criteria":51,"vulnerable":4},"4.0","cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":44,"criteria":54,"vulnerable":4},"communication_manager","cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":47,"criteria":56,"vulnerable":4},"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":58,"criteria":59,"vulnerable":4},"3.1.2","cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":61,"criteria":62,"vulnerable":4},"3.1.3","cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":64,"criteria":65,"vulnerable":4},"3.1.4","cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":67,"criteria":68,"vulnerable":4},"3.1.5","cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*",[70,74,77,80,84,89,93,97,100,103,106,109,112,116,120,123,126,129,132,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fosvdb.org\u002F46598","Osvdb",[],{"url":75,"source":72,"tags":76},"http:\u002F\u002Fosvdb.org\u002F46599",[],{"url":78,"source":72,"tags":79},"http:\u002F\u002Fosvdb.org\u002F46600",[],{"url":81,"source":82,"tags":83},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F30751","Secunia",[],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fsupport.avaya.com\u002Felmodocs2\u002Fsecurity\u002FASA-2008-268.htm","Avaya",[88],"Vendor Advisory",{"url":90,"source":91,"tags":92},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F29939","Securityfocus",[],{"url":94,"source":95,"tags":96},"http:\u002F\u002Fwww.voipshield.com\u002Fresearch-details.php?id=86","Voipshield",[],{"url":98,"source":95,"tags":99},"http:\u002F\u002Fwww.voipshield.com\u002Fresearch-details.php?id=87",[],{"url":101,"source":95,"tags":102},"http:\u002F\u002Fwww.voipshield.com\u002Fresearch-details.php?id=88",[],{"url":104,"source":95,"tags":105},"http:\u002F\u002Fwww.voipshield.com\u002Fresearch-details.php?id=89",[],{"url":107,"source":95,"tags":108},"http:\u002F\u002Fwww.voipshield.com\u002Fresearch-details.php?id=90",[],{"url":110,"source":95,"tags":111},"http:\u002F\u002Fwww.voipshield.com\u002Fresearch-details.php?id=91",[],{"url":113,"source":114,"tags":115},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2008\u002F1943\u002Freferences","Vupen",[],{"url":117,"source":118,"tags":119},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F43381","Ibmcloud",[],{"url":121,"source":118,"tags":122},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F43384",[],{"url":124,"source":118,"tags":125},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F43389",[],{"url":127,"source":118,"tags":128},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F43393",[],{"url":130,"source":118,"tags":131},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F43394",[],{"url":133,"source":118,"tags":134},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F43395",[],{"url":71,"source":72,"tags":136},[],{"url":75,"source":72,"tags":138},[],{"url":78,"source":72,"tags":140},[],{"url":81,"source":82,"tags":142},[],{"url":85,"source":86,"tags":144},[88],{"url":90,"source":91,"tags":146},[],{"url":94,"source":95,"tags":148},[],{"url":98,"source":95,"tags":150},[],{"url":101,"source":95,"tags":152},[],{"url":104,"source":95,"tags":154},[],{"url":107,"source":95,"tags":156},[],{"url":110,"source":95,"tags":158},[],{"url":113,"source":114,"tags":160},[],{"url":117,"source":118,"tags":162},[],{"url":121,"source":118,"tags":164},[],{"url":124,"source":118,"tags":166},[],{"url":127,"source":118,"tags":168},[],{"url":130,"source":118,"tags":170},[],{"url":133,"source":118,"tags":172},[],38,[175],{"id":176,"name":177,"description":178,"extendedDescription":27,"status":179,"abstraction":180,"structure":181},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":185,"metaDescription":186,"keywords":187,"canonicalUrl":188,"structuredData":189},"What is CVE-2008-6707? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-6707, a medium severity cyber security vulnerability from 2009. The Web management interface in Avaya SIP Enablement Servi...","CVE-2008-6707, CVE-2008-6707 vulnerability, CVE-2008-6707 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, avaya security, sip_enablement_services vulnerability, communication_manager vulnerability","\u002Fwhat-is\u002Fcve-2008-6707",{"@context":190,"@type":191,"headline":185,"description":186,"datePublished":10,"dateModified":11,"author":192,"publisher":196,"about":200,"mainEntityOfPage":204,"articleSection":207,"keywords":208},"https:\u002F\u002Fschema.org","TechArticle",{"@type":193,"name":194,"url":195},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":193,"name":194,"url":195,"logo":197},{"@type":198,"url":199},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":201,"name":6,"description":202,"additionalType":203},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":205,"@id":206},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-6707","Cybersecurity","CVE-2008-6707, CVE-2008-6707 vulnerability, CVE-2008-6707 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[210],{"Operator":211,"Negate":28,"Nodes":212},"AND",[213,224],{"Operator":214,"Negate":32,"CPEMatch":215},"OR",[216,218,220,222],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":217,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F8D4881F-650A-4FA1-B604-70EBBED41AE7",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":219,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F9EB9ECB-9ABF-40ED-9116-D3FE9FC73B38",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":221,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"43F41650-7E55-436A-9935-8CE88B428680",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":223,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7BFF25B3-B7C7-479C-8C2A-995E568C3395",{"Operator":214,"Negate":32,"CPEMatch":225},[226,228,230,232,234,236,239,242,244],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":227,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"88F5C363-3A38-43FC-A06D-73E280AB844B",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":229,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C4030E5D-BC15-481D-A15E-98FAE65130D9",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":231,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":233,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BBD119B9-FE11-4165-943D-119E906DC013",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":235,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"89F99C5C-C184-4A5C-B8BA-F558C4A38730",{"Vulnerable":4,"Criteria":237,"MatchCriteriaID":238,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","1EAA2BC9-4794-4441-8AA8-3C1B7297FD06",{"Vulnerable":4,"Criteria":240,"MatchCriteriaID":241,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","423E4EEB-3D6F-449E-B623-C8D051E8FA3B",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":243,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"87089C0E-2241-46A7-93EE-EC41D52A89C6",{"Vulnerable":4,"Criteria":245,"MatchCriteriaID":246,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","5BD89D61-0B42-4DDE-99F1-71570A37A136",[],[],{"lastModified":11,"cacheTime":250,"version":22},1792347786055,{"score":252,"band":253,"action":254,"scoredAt":255},22,"Low","Monitor","2026-10-17T06:36:33.697538+00:00"]