CVE-2007-1491: Avaya s8300

Medium severity, CVSS 5.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.

Affected products

• Avaya s8300: up to and including cm_3.1.2
• Avaya s8500: up to and including cm_3.1.2
• Avaya s8700: up to and including cm_3.1.2
• Avaya SIP Enablement Services: any version

Published 2007-03-16. Last modified 2026-06-16.