AL
Vendor
Alcatel-lucent
41
CVEs
0
On KEV
0
New 30D
Products
OM–
Omnipcx
Alcatel-lucent
8 CVEs0 on KEV0 new
OS9.8
OmniAccess Stellar Products
Alcatel-Lucent
3 CVEs0 on KEV0 new
CC–
Ccagent
Alcatel-lucent
2 CVEs0 on KEV0 new
OW–
Omniaccess Wireless
Alcatel-lucent
2 CVEs0 on KEV0 new
OF–
Omniswitch Firmware
Alcatel-lucent
2 CVEs0 on KEV0 new
OC–
Omnitouch Contact Center
Alcatel-lucent
2 CVEs0 on KEV0 new
OM–
Omnivista
Alcatel-lucent
2 CVEs0 on KEV0 new
A27.4
Ale 20
Alcatel-lucent
1 CVEs0 on KEV0 new
A27.4
Ale 20h
Alcatel-lucent
1 CVEs0 on KEV0 new
A37.4
Ale 30
Alcatel-lucent
1 CVEs0 on KEV0 new
A37.4
Ale 300
Alcatel-lucent
1 CVEs0 on KEV0 new
A37.4
Ale 30h
Alcatel-lucent
1 CVEs0 on KEV0 new
A47.4
Ale 400
Alcatel-lucent
1 CVEs0 on KEV0 new
A57.4
Ale 500
Alcatel-lucent
1 CVEs0 on KEV0 new
C7–
Cellpipe 7130 RG 5ae.m2013 Hol Firmware
Alcatel-lucent
1 CVEs0 on KEV0 new
C7–
Cellpipe 7130 Router Firmware
Alcatel-lucent
1 CVEs0 on KEV0 new
HD7.5
Home Device Manager
Alcatel-lucent
1 CVEs0 on KEV0 new
MH5.4
Motive Home Device Manager
Alcatel-lucent
1 CVEs0 on KEV0 new
OS2.4
OmniAccess Stellar
Alcatel-Lucent
1 CVEs0 on KEV0 new
OO–
Omnipcx Office
Alcatel-lucent
1 CVEs0 on KEV0 new
O8–
Omnitouch 8400 Instant Communications Suite
Alcatel-lucent
1 CVEs0 on KEV0 new
O8–
Omnitouch 8460 Advanced Communication Server
Alcatel-lucent
1 CVEs0 on KEV0 new
O8–
Omnitouch 8660 MY Teamwork
Alcatel-lucent
1 CVEs0 on KEV0 new
O8–
Omnitouch 8670 Automated Delivery Message Delivery System
Alcatel-lucent
1 CVEs0 on KEV0 new
O4–
Omnivista 4760 Server
Alcatel-lucent
1 CVEs0 on KEV0 new
O89.8
Omnivista 8770 Network Management System
Alcatel-lucent
1 CVEs0 on KEV0 new
VM–
Voice Mail System
Alcatel-lucent
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-52690 | OS OmniAccess Stellar Products Alcatel-Lucent | 8.1 | Jul 16 | Command Injection Vulnerability in the OmniAccess Stellar over UDP Service |
| CVE-2025-52689 | OS OmniAccess Stellar Products Alcatel-Lucent | 9.8 | Jul 16 | Weak Session ID Check in the OmniAccess Stellar Web Management Interface |
| CVE-2025-52688 | OS OmniAccess Stellar Products Alcatel-Lucent | 9.8 | Jul 16 | Command Injection Vulnerability in the OmniAccess Stellar Web Management Interface |
| CVE-2025-52687 | OS OmniAccess Stellar Alcatel-Lucent | 2.4 | Jul 16 | JavaScript Injection Vulnerability in the OmniAccess Stellar Web Management Interface |
| CVE-2024-29149 | A3 Ale 30h Alcatel-lucent | 7.4 | May 7 | An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728 |
| CVE-2015-6498 | HD Home Device Manager Alcatel-lucent | 7.5 | Aug 9 | Alcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to spoof and make calls as target devices |
| CVE-2015-8687 | MH Motive Home Device Manager Alcatel-lucent | 5.4 | Mar 23 | Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Alcatel-Lucent Motive Home Device Manager (HDM) before 4.2 allow remote attackers to inject… |
| CVE-2016-9796 | O8 Omnivista 8770 Network Management System Alcatel-lucent | 9.8 | Dec 3 | Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024 |
| CVE-2015-4586 | C7 Cellpipe 7130 RG 5ae.m2013 Hol Firmware Alcatel-lucent | – | Jun 23 | Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication… |
| CVE-2015-4587 | C7 Cellpipe 7130 Router Firmware Alcatel-lucent | – | Jun 18 | Cross-site scripting (XSS) vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to inject arbitrary web script or HTML via… |
| CVE-2015-2805 | OF Omniswitch Firmware Alcatel-lucent | – | Jun 16 | Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E,… |
| CVE-2015-2804 | OF Omniswitch Firmware Alcatel-lucent | – | Jun 16 | The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates… |
| CVE-2013-4653 | O8 Omnitouch 8460 Advanced Communication Server Alcatel-lucent | – | Aug 20 | Multiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch… |
| CVE-2011-0344 | OM Omnipcx Alcatel-lucent | – | Mar 8 | Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in… |
| CVE-2011-0345 | OM Omnivista Alcatel-lucent | – | Mar 8 | Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal… |
| CVE-2010-3281 | O4 Omnivista 4760 Server Alcatel-lucent | – | Sep 23 | Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch3 allows remote attackers to execute arbitrary code or cause… |
| CVE-2010-3280 | CC Ccagent Alcatel-lucent | – | Sep 23 | The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization… |
| CVE-2010-3279 | CC Ccagent Alcatel-lucent | – | Sep 23 | The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables… |
| CVE-2008-1331 | OO Omnipcx Office Alcatel-lucent | – | Apr 2 | cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to… |
| CVE-2007-5361 | OM Omnipcx Alcatel-lucent | – | Nov 20 | The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the… |
| CVE-2007-5190 | OM Omnivista Alcatel-lucent | – | Oct 22 | Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action… |
| CVE-2007-2512 | OM Omnipcx Alcatel-lucent | – | Jun 7 | Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via… |
| CVE-2007-1822 | VM Voice Mail System Alcatel-lucent | – | Apr 2 | Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification… |
| CVE-2007-0932 | OW Omniaccess Wireless Alcatel-lucent | – | Feb 14 | The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege… |
| CVE-2007-0931 | OW Omniaccess Wireless Alcatel-lucent | – | Feb 14 | Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows… |
| CVE-2003-1108 | OM Omnipcx Alcatel-lucent | – | Dec 31 | The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code… |
| CVE-2002-1691 | OM Omnipcx Alcatel-lucent | – | Dec 31 | Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access |
| CVE-2002-0294 | OM Omnipcx Alcatel-lucent | – | May 31 | Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system |
| CVE-2002-0295 | OM Omnipcx Alcatel-lucent | – | May 31 | Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges |
| CVE-2002-0293 | OM Omnipcx Alcatel-lucent | – | May 31 | FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file |
