CVE-2020-7033CWE-79

Avaya Equinox Conferencing XSS

Medium · published November 12, 2020

CVSS v3.1
6.3
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00565 · 46.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-11-12T23:55Z
EPSS history
Timeline
  • 12 NOV 23:55Z
    Avaya Equinox Conferencing XSS
    cvelistv5