Login Request a demo
AE
Product
Aura Experience Portal
by Avaya · last CVE Jan 17, 2024
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aura Experience Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-25655
6.1
0%
Jun 24
A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack
Affected: 7.0 through 7.2.3; 8.0.0
CVE-2021-25656
5.4
0%
Jun 24
Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive…
Affected: 7.0 through 7.2.3; 8.0.0
CVE-2023-7031
4.3
0%
Jan 17
Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated…
Affected: 8.0.0 before 8.1.2.0.0402
Showing 3