CVE-2020-7033

Published: Nov 13, 2020Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10.

Affected (1)

Products: Avaya: Equinox Conferencing

1 product

Equinox Conferencing

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Avaya Equinox Conferencing	From 9.0.0 to 9.1.10

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://downloads.avaya.com/css/P8/documents/101072147

Source: securityalerts@avaya.com

Vendor Advisory

https://downloads.avaya.com/css/P8/documents/101072147

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.