Avaya has acknowledged a vulnerability in various Avaya products, which potentially can be exploited to conduct cross-site scripting attacks.

For more information:
SA24727

The vulnerability affects the following products and versions:
* Avaya Messaging Storage Server (3.x)
* Intuity AUDIX LX (2.0)
* Avaya Messaging Networking (3.1)

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers