{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<P>Avaya Experience Portal versions ant\u00e9rieures \u00e0 7.0</P>","content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2012-4244","url":"https://www.cve.org/CVERecord?id=CVE-2012-4244"},{"name":"CVE-2012-3511","url":"https://www.cve.org/CVERecord?id=CVE-2012-3511"},{"name":"CVE-2012-4405","url":"https://www.cve.org/CVERecord?id=CVE-2012-4405"},{"name":"CVE-2011-3970","url":"https://www.cve.org/CVERecord?id=CVE-2011-3970"},{"name":"CVE-2012-3400","url":"https://www.cve.org/CVERecord?id=CVE-2012-3400"},{"name":"CVE-2012-2871","url":"https://www.cve.org/CVERecord?id=CVE-2012-2871"},{"name":"CVE-2012-2870","url":"https://www.cve.org/CVERecord?id=CVE-2012-2870"},{"name":"CVE-2012-2133","url":"https://www.cve.org/CVERecord?id=CVE-2012-2133"},{"name":"CVE-2012-3488","url":"https://www.cve.org/CVERecord?id=CVE-2012-3488"},{"name":"CVE-2012-1568","url":"https://www.cve.org/CVERecord?id=CVE-2012-1568"},{"name":"CVE-2012-2893","url":"https://www.cve.org/CVERecord?id=CVE-2012-2893"},{"name":"CVE-2012-3546","url":"https://www.cve.org/CVERecord?id=CVE-2012-3546"},{"name":"CVE-2012-3489","url":"https://www.cve.org/CVERecord?id=CVE-2012-3489"},{"name":"CVE-2011-1202","url":"https://www.cve.org/CVERecord?id=CVE-2011-1202"},{"name":"CVE-2012-2825","url":"https://www.cve.org/CVERecord?id=CVE-2012-2825"}],"links":[],"reference":"CERTA-2014-AVI-008","revisions":[{"description":"version initiale.","revision_date":"2014-01-10T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"D\u00e9ni de service"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans <span\nclass=\"textit\">Avaya Experience Portal</span>. Certaines d'entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un d\u00e9ni de service.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Avaya Experience Portal","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Avaya ASA-2012-482 du 08 janvier 2014","url":"https://downloads.avaya.com/css/P8/documents/100167760"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Avaya ASA-2013-041 du 08 janvier 2014","url":"https://downloads.avaya.com/css/P8/documents/100169684"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Avaya ASA-2012-479 du 08 janvier 2014","url":"https://downloads.avaya.com/css/P8/documents/100167733"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Avaya ASA-2012-448 du 08 janvier 2014","url":"https://downloads.avaya.com/css/P8/documents/100167395"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Avaya ASA-2012-371 du 08 janvier 2014","url":"https://downloads.avaya.com/css/P8/documents/100166061"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Avaya ASA-2012-444 du 08 janvier 2014","url":"https://downloads.avaya.com/css/P8/documents/100167374"}]}