Avaya SIP Enablement Services vulnerabilities

8 CVEs affecting Avaya SIP Enablement Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-6709, published 2009-04-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-6709, published 2009-04-10. High severity, CVSS 9.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to…
CVE-2008-6706, published 2009-04-10. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to…
CVE-2008-6708, published 2009-04-10. High severity, CVSS 9.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated…
CVE-2008-6707, published 2009-04-10. Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days. The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which…
CVE-2008-3778, published 2008-08-25. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core…
CVE-2008-2812, published 2008-07-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL…
CVE-2007-1491, published 2007-03-16. Medium severity, CVSS 5.2. EPSS: 0.4% chance of exploitation in the next 30 days. Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.
CVE-2008-3777, published 2008-08-25. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm…