Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2024-4197

Avaya IP Office One-X Portal File Upload Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya IP Office

Default version status: affected

  • 0 to < 11.1.3.1affected

References