VYPR

by Alcatel Lucent

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2007-51900.030.05Oct 22, 2007Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI.
CVE-2011-03450.000.00Mar 8, 2011Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.