← Vulnerability feed

Vulnerability record · CVE-2008-6711 · published 10 April 2009

CVE-2008-6711: Avaya communication manager vulnerability

Avaya · Communication Manager

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."

9.0 CVSS 2.0 High EPSS 2.4% · top 16.3%
9.0CVSS 2.0 base score
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/30799
http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm Vendor Advisory
http://www.osvdb.org/46581
http://www.securityfocus.com/bid/29939
http://www.voipshield.com/research-details.php?id=80
http://www.vupen.com/english/advisories/2008/1944/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43391
http://secunia.com/advisories/30799
http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm Vendor Advisory
http://www.osvdb.org/46581
http://www.securityfocus.com/bid/29939
http://www.voipshield.com/research-details.php?id=80
http://www.vupen.com/english/advisories/2008/1944/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43391

Track CVE-2008-6711 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2008-6708Avaya communication manager vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.1%9.0CVE-2008-6709Avaya sip enablement services vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.4%9.0CVE-2008-6710Avaya communication manager vulnerabilityUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 all…EPSS 2.1%9.0CVE-2008-5709Avaya communication manager improper input validation vulnerabilityMultiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, …EPSS 3.3%7.8CVE-2008-6706Avaya sip enablement services vulnerabilityMultiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communica…EPSS 2.3%7.8CVE-2008-2812Linux kernel null pointer dereference vulnerabilityThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or p…EPSS 0.43%7.5CVE-2008-6574Avaya communication manager vulnerabilityUnspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges an…EPSS 1.4%7.5CVE-2008-3778Avaya sip enablement services permissions and access controls vulnerabilityThe remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on t…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2008-6711), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.