Login Request a demo
AO
Product
Aura Orchestration Designer
by Avaya · last CVE Apr 23, 2021
2
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aura Orchestration Designer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-7035
6.5
1%
Apr 23
An XML External Entities (XXE)vulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker to gain read access…
Affected: 7.0 through 7.2.2
CVE-2018-15613
6.1
1%
Sep 21
A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user
Affected: before 7.2.1
Showing 2