CVE-2007-1367: Avaya s8300

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.

Affected products

• Avaya s8300: version cm_2.0 only; version cm_3.1 only; version r2.0.0 only; version r2.0.1 only
• Avaya s8500: version cm_2.0 only; version cm_3.1 only; version r2.0.0 only; version r2.0.1 only
• Avaya s8700: version cm_2.0 only; version cm_3.1 only; version r2.0.0 only; version r2.0.1 only
• Avaya s8710: version cm_2.0 only; version cm_3.1 only; version r2.0.0 only; version r2.0.1 only

Published 2007-03-09. Last modified 2026-06-16.