Avaya s3400 vulnerabilities

6 CVEs affecting Avaya s3400, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2374, published 2007-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1050, published 2004-12-31. High severity, CVSS 10.0. EPSS: 67.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally…
CVE-2004-0842, published 2004-12-23. High severity, CVSS 7.5. EPSS: 56.6% chance of exploitation in the next 30 days. Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading…
CVE-2007-1765, published 2007-03-30. High severity, CVSS 9.3. EPSS: 54.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file,…
CVE-2004-0841, published 2004-12-23. Medium severity, CVSS 5.0. EPSS: 48.7% chance of exploitation in the next 30 days. Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3"…
CVE-2004-0839, published 2004-08-18. Medium severity, CVSS 5.0. EPSS: 34% chance of exploitation in the next 30 days. Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick…
CVE-2007-2374, published 2007-04-30. High severity, CVSS 9.3. EPSS: 17.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon…