CVE-2021-25656CWE-79

Avaya Aura Experience Portal XSS vulnerabilities

Medium · published June 24, 2021

CVSS v3.1
5.3
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-06-24T08:55Z
EPSS history
Timeline
  • 24 JUN 08:55Z
    Avaya Aura Experience Portal XSS vulnerabilities
    cvelistv5