Cross site scripting

A Cross Site Scripting XSS Vulnerability on the Unified Portal Client web client used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10...

PT-2020-19348 · Avaya · Avaya Weblm

Name of the Vulnerable Software and Affected Versions: Avaya WebLM versions 7.0 through 7.1.3.6 Avaya WebLM versions 8.0 through 8.1.2 Description: An XML external entity XXE vulnerability in the Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side...

CVE-2020-7033 Avaya Equinox Conferencing XSS

A Cross Site Scripting XSS Vulnerability on the Unified Portal Client web client used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10...

CVE-2020-7033

The CVE-2020-7033 issue affects Avaya Equinox Conferencing, specifically the Unified Portal Client (web client) in 9.x releases prior to 9.1.10. The vulnerability is an authenticated cross-site scripting (XSS) flaw that could be abused by a logged-in user to perform XSS attacks. The connected doc...

CVE-2020-7033

A Cross Site Scripting XSS Vulnerability on the Unified Portal Client web client used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10...

Scopia XT Desktop 8.3.915.4 Cross Site Request Forgery

Exploit Title: Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery change admin password Google Dork: inurl:scopia+index.jsp Date: 2020-09-09 Exploit Author: v1n1v131r4 Vendor Homepage: https://avaya.com Software Link:...

CVE-2020-7029

A Cross-Site Request Forgery CSRF vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged...

CVE-2020-7029

A Cross-Site Request Forgery CSRF vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged...

CVE-2020-7029 Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery CSRF vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged...

CVE-2020-7029

The CVE-2020-7029 entry concerns a Cross-Site Request Forgery (CSRF) vulnerability in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. Affected products/versions are Communication Manager 7.0.x, 7.1.x before 7.1.3.5, and 8.0.x; Messaging ...

Avaya IP Office Information Disclosure Vulnerability (CNVD-2020-46847)

Avaya IP Office is a small business phone system from Avaya, Inc. in the United States. An information disclosure vulnerability exists in the Web interface component in Avaya IP Office versions 9.x, 10.0 through 10.1.0.7, and 11.0 through 11.0.4.2. The vulnerability stems from an error in...

Vulnerability fixed in Avaya IP Office Manager

A vulnerability has been fixed in Avaya IP Office Manager. The vulnerability allows an unauthenticated malicious person with access to the network to obtain sensitive data. Avaya has released updates to fix the vulnerability. More information can be found on the page below:...

Avaya IP Office 10.x < 10.1.0.8, 11.0 < 11.0.4.3 Information Disclosure Vulnerability

Avaya IP Office is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avaya IP Office 11 - Password Disclosure

Exploit Title: Avaya IP Office 11 - Password Disclosure Exploit Author: hyp3rlinx Date: 2020-06-09 Vender Homepage: https://downloads.avaya.com Product Link: https://downloads.avaya.com/css/P8/documents/101067493 CVE: CVE-2020-7030 + Credits: John Page aka hyp3rlinx + Website:...

Avaya IP Office 9.x < 10.1.0.8, 11.0 < 11.0.4.3 Information Disclosure Vulnerability

Avaya IP Office is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avaya IP Office 11 Insecure Transit / Password Disclosure Vulnerability

Avaya IP Office versions 9.1.8.0 through 11 suffer from an insecure transit vulnerability that allows for password disclosure. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

Avaya IP Office 11 Insecure Transit / Password Disclosure

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AVAYA-IP-OFFICE-INSECURE-TRANSIT-PASSWORD-DISCLOSURE.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.avaya.com Product Avaya IP Office v9.1.8.0 - 11 IP Office...

Avaya IP Office Information Disclosure Vulnerability

Avaya IP Office is a small business phone system from Avaya, Inc. in the United States. A security vulnerability exists in the Web interface component in Avaya IP Office versions 9.x, 10.0 through 10.1.0.7, and 11.0 through 11.0.4.2. A local attacker could exploit the vulnerability to gain...

CVE-2019-7007

A directory traversal vulnerability has been found in the Avaya Equinox ManagementiViewversions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server...