Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.
http://www.osvdb.org/33346
http://support.avaya.com/elmodocs2/security/ASA-2007-051.htm
http://secunia.com/advisories/24434
Source: Mitre, NVD
Published: 2007-03-16
Updated: 2026-06-16
Base Score: 5.2
Vector: CVSS2#AV:A/AC:L/Au:S/C:P/I:P/A:P
Severity: Medium
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: High
EPSS: 0.00093