CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7038 – Avaya Meetings Server Information Disclosure vulnerability
https://notcve.org/view.php?id=CVE-2020-7038
A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server. Se detectó una vulnerabilidad en el componente Management de Avaya Equinox Conferencing que podría permitir a un atacante remoto no autenticado conseguir acceso a las sesiones de pantalla compartida y de pizarra. Las versiones afectadas del componente Management de Avaya Equinox Conferencing incluyen todas las versiones 3.x anteriores a la 3.17. • https://support.avaya.com/css/P8/documents/101075574 • CWE-284: Improper Access Control •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7037 – Avaya Equinox Conferencing XXE vulnerability
https://notcve.org/view.php?id=CVE-2020-7037
An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server. Una vulnerabilidad XML External Entities (XXE) en el componente Media Server de Avaya Equinox Conferencing que podría permitir a un atacante remoto autenticado conseguir acceso de lectura a la información almacenada en un sistema afectado o incluso potencialmente conllevar a una denegación de servicio. Las versiones afectadas de Avaya Equinox Conferencing incluyen todas las versiones 9.x anteriores a 9.1.11. • https://support.avaya.com/css/P8/documents/101075574 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 6.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7033 – Avaya Equinox Conferencing XSS
https://notcve.org/view.php?id=CVE-2020-7033
A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10. Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Unified Portal Client (cliente web), que se utiliza en Avaya Equinox Conferencing puede permitir a un usuario autenticado realizar ataques de tipo XSS. Las versiones afectadas de Equinox Conferencing incluyen todas las versiones 9.x anteriores a 9.1.10 • https://downloads.avaya.com/css/P8/documents/101072147 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •