Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:aura_conferencing:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d)
ProductAura Conferencing (8d6ef722-e9f0-5fa6-b304-11b5c56a73c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7007 vulnerable 2026-06-08 05:14:13.661991 Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability
HIGH (7.5)
A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server.
Published: 2020-02-28T22:00:17.430Z
Updated: 2024-09-17T02:11:09.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7000 vulnerable 2026-06-08 05:14:13.641726 Avaya Aura Conferencing XSS
MEDIUM (5.9)
A Cross-Site Scripting (XSS) vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 (8.0.14). Prior versions not listed were not evaluated.
Published: 2019-07-31T21:42:45.850Z
Updated: 2024-09-16T22:51:22.616Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.