Aura Experience Portal
Approved changes feed: RSS · Atom
cpe:2.3:a:avaya:aura_experience_portal:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Avaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d) |
|---|---|
| Product | Aura Experience Portal (204b17e6-8067-5274-aa2f-80bec399b955) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7031 |
vulnerable | 2026-06-08 06:21:56.649260 |
Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities
MEDIUM (5.7)
Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated non-privileged user. Affected versions include 8.0.x and 8.1.x, prior to 8.1.2 patch 0402. Versions prior to 8.0 are end of manufacturer support.
Published: 2024-01-17T18:34:41.831Z
Updated: 2024-09-03T19:49:39.586Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25656 |
vulnerable | 2026-06-08 05:30:41.167575 |
Avaya Aura Experience Portal XSS vulnerabilities
MEDIUM (5.3)
Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
Published: 2021-06-24T08:55:32.000Z
Updated: 2024-08-03T20:11:28.258Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25655 |
vulnerable | 2026-06-08 05:30:41.165143 |
URL redirection to untrusted site possible in Avaya Aura Experience Portal
MEDIUM (4.4)
A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
Published: 2021-06-24T08:55:31.000Z
Updated: 2024-08-03T20:11:27.870Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5285 |
vulnerable | 2026-06-08 05:07:56.617245 |
Details available
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
Published: 2019-11-15T15:44:05.000Z
Updated: 2024-08-06T00:53:48.923Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.