CVE-2020-7033
Medium
Description
A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10.
SeverityMedium
CVSS6.3
Exploit probability—
ProductAvaya Equinox Conferencing
PublishedNov 13, 2020
First seenNov 13, 2020
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- avaya equinox_conferencing9.1.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya equinox_conferencing | 9.0.0 ≤ v < 9.1.10 | 9.1.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.