Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Avaya Call Management System CSV injection vulnerability
Vulnerability Description
A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command execution on the system used to open the file by a spreadsheet software such as Microsoft Excel.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:L
Vulnerability Type
CWE-1236
Vulnerability Title
Avaya Call Management System 安全漏洞
Vulnerability Description
Avaya Call Management System是美国亚美亚（Avaya）公司的一个集成的分析和报告解决方案，可让您随时了解几乎所有信息。 Avaya Call Management System 存在安全漏洞，该漏洞源于存在CSV注入漏洞，允许具有管理权限的用户输入精心设计的数据执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A