https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-6498.htmlhttps://patchthecve.com/cve/CVE-2015-6498.htmlWed, 17 Jun 2026 00:30:58 +0000HIGH 7.5: Alcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to spoof and make calls as target devices.https://patchthecve.com/cve/CVE-2015-8687.htmlhttps://patchthecve.com/cve/CVE-2015-8687.htmlWed, 17 Jun 2026 00:35:02 +0000MEDIUM 5.4: Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Alcatel-Lucent Motive Home Device Manager (HDM) before 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceTypeID parameter to DeviceType/getDeviceType.do; the (2) policyActionClass or (3https://patchthecve.com/cve/CVE-2015-4586.htmlhttps://patchthecve.com/cve/CVE-2015-4586.htmlWed, 17 Jun 2026 00:27:33 +0000MEDIUM 6.8: Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an add_user action in a request to password.cmd.https://patchthecve.com/cve/CVE-2015-4587.htmlhttps://patchthecve.com/cve/CVE-2015-4587.htmlWed, 17 Jun 2026 00:27:33 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to inject arbitrary web script or HTML via the "Custom application" field in the "port triggering" menu.https://patchthecve.com/cve/CVE-2015-2805.htmlhttps://patchthecve.com/cve/CVE-2015-2805.htmlWed, 17 Jun 2026 00:24:47 +0000MEDIUM 6.8: Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, 6855, 6900, 10K, and 6860 with firmware 6.4.5.R02, 6.4.6.R01, 6.6.4.R01, 6.6.5.R02, 7.3.2.R01, 7.3.3.R01, 7.3.4.https://patchthecve.com/cve/CVE-2015-2804.htmlhttps://patchthecve.com/cve/CVE-2015-2804.htmlWed, 17 Jun 2026 00:24:46 +0000MEDIUM 4.3: The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates weak session identifiers, which allows remote attackers to hijack arbitrary sessions via a brute force attack.https://patchthecve.com/cve/CVE-2013-4653.htmlhttps://patchthecve.com/cve/CVE-2013-4653.htmlTue, 16 Jun 2026 23:57:39 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System (AMDS) before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and Omni