MEDIUM
Avaya Aura Conferencing XSS
Published Jul 31, 2019
6.1
MEDIUMCVSS 3.1
EPSS 1.07%
Description
A Cross-Site Scripting (XSS) vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 (8.0.14). Prior versions not listed were not evaluated.
Affected products
-
- Version 8.xStatusaffectedConstraints<8.0.14
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Avaya | Avaya Aura Conferencing | n/a |
|
OR
- ≤ 8.0
- 8.0
- 8.0
- 8.0
- 8.0
- 8.0
- 8.0
- 8.0
- 8.0
- 8.0
- 8.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://downloads.avaya.com/css/P8/documents/101060208 x_refsource_CONFIRMVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16551 Advisory
| Link | Providers | Tags |
|---|---|---|
| https://downloads.avaya.com/css/P8/documents/101060208 | x_refsource_CONFIRMVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16551 | Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner avaya
Published Jul 31, 2019
Updated Sep 16, 2024
Reserved Jan 28, 2019
Link CVE-2019-7000
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2019-16551 Assigner avaya
Published Jul 31, 2019
Updated Sep 16, 2024
Exploited since n/a
Link EUVD-2019-16551