Avaya Aura Experience Portal Cross-Site Scripting Vulnerability

Avaya Aura Experience Portal is the next-generation Avaya Voice Portal from Avaya, Inc. that provides organizations with a single point of orchestration for all automated voice and multimedia applications and services. experience Portal supports SIP, IP, TDM or hybrid environments. It includes powerful management, reporting, development and virtualization capabilities that help organizations reduce costs and streamline operations.A security vulnerability exists in Avaya Aura Experience Portal Web, which could be exploited by an attacker to allow an authenticated user to disclose sensitive information.