vendor:
Intuity Audix LX
by:
SecurityFocus
9.3
CVSS
HIGH
Multiple Remote Command-Execution, Cross-Site Request-Forgery, Cross-Site Scripting
78, 352, 79
CWE
Product Name: Intuity Audix LX
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Avaya Intuity Audix LX Multiple Remote Vulnerabilities
Avaya Intuity Audix LX is prone to multiple remote vulnerabilities, including multiple remote command-execution vulnerabilities, a cross-site request-forgery vulnerability, and a cross-site scripting vulnerability. Attackers can exploit these issues to execute arbitrary commands with the privileges of 'vexvm' on the underlying system, steal cookie-based authentication credentials, execute arbitrary script code, and perform administrative tasks. Other attacks are also possible.
Mitigation:
Users should apply the appropriate updates from the vendor to address these issues.
