Avaya Vulnerabilities and Affected Products
Vulnerabilities associated with ip600_media_servers.
Products
Clear product- IP Office7 vulnerabilities
- Avaya Aura Utility Services3 vulnerabilities
- ip600_media_servers3 vulnerabilities
- IX Workforce Engagement3 vulnerabilities
- Aura System Manager2 vulnerabilities
- Avaya Aura Appliance Virtualization Platform Utilities2 vulnerabilities
- Avaya Aura Communication Manager2 vulnerabilities
- Avaya Call Management System2 vulnerabilities
- Avaya Spaces2 vulnerabilities
- Communication Manager2 vulnerabilities
- ip_office2 vulnerabilities
- Orchestration Designer2 vulnerabilities
- Aura Device Services1 vulnerability
- Aura Orchestration Designer1 vulnerability
- aura_device_services1 vulnerability
- aura_system_manager1 vulnerability
- aura_utility_services1 vulnerability
- Avaya Aura Application Enablement Services1 vulnerability
- Avaya Aura Conferencing1 vulnerability
- Avaya Aura Devices Services1 vulnerability
- Avaya Aura Messaging1 vulnerability
- Avaya Aura® System Platform1 vulnerability
- Avaya Control Manager1 vulnerability
- Avaya Equinox Conferencing1 vulnerability
- Avaya Experience Portal1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
avaya ip600_media_servers Out-of-bounds WriteHeap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability." Nov 18, 2004 | CVSS10.0v2.0 | EPSS67.1% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
Microsoft Internet Explorer Popup.show Method VulnerabilityInternet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability." Sep 14, 2004 | CVSS5.0v2.0 | EPSS48.7% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
Microsoft Internet Explorer Arbitrary Program Installation VulnerabilityInternet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html". Sep 14, 2004 | CVSS5.0v2.0 | EPSS34% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |