CVE-2019-7000CWE-79

Avaya Aura Conferencing XSS

Medium · published July 31, 2019

CVSS v3.0
5.9
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

A Cross-Site Scripting (XSS) vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 (8.0.14). Prior versions not listed were not evaluated.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01075 · 64.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2019-07-31T21:42Z
EPSS history
Timeline
  • 31 JUL 21:42Z
    Avaya Aura Conferencing XSS
    cvelistv5