CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7038 – Avaya Meetings Server Information Disclosure vulnerability
https://notcve.org/view.php?id=CVE-2020-7038
28 Apr 2021 — A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server. Se detectó una vulnerabilidad en el componente Management de Avaya Equinox Conferencing que podría permitir a un atacante ... • https://support.avaya.com/css/P8/documents/101075574 • CWE-284: Improper Access Control •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7037 – Avaya Equinox Conferencing XXE vulnerability
https://notcve.org/view.php?id=CVE-2020-7037
28 Apr 2021 — An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server. Una vulnerabilidad XML External Entities (XXE) en el componente Media Server de Avaya Equ... • https://support.avaya.com/css/P8/documents/101075574 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 6.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7033 – Avaya Equinox Conferencing XSS
https://notcve.org/view.php?id=CVE-2020-7033
12 Nov 2020 — A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10. Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Unified Portal Client (cliente web), que se utiliza en Avaya Equinox Conferencing puede permitir a un usuario autenticado realizar ataques de tipo XSS. Las versiones afectadas de Equinox Confe... • https://downloads.avaya.com/css/P8/documents/101072147 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •