Avaya Integrated Management vulnerabilities

3 CVEs affecting Avaya Integrated Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1229, published 2011-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0595, published 2004-07-27. Medium severity, CVSS 6.8. EPSS: 45.2% chance of exploitation in the next 30 days. The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be…
CVE-2004-1307, published 2004-12-21. High severity, CVSS 7.5. EPSS: 6.3% chance of exploitation in the next 30 days. Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number…
CVE-2011-1229, published 2011-04-13. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and…