Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:aura_experience_portal:8.0.0:*:*:*:*:*:*:*

part: a version: 8.0.0 update: *

VendorAvaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d)
ProductAura Experience Portal (204b17e6-8067-5274-aa2f-80bec399b955)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25656 vulnerable 2026-06-08 05:30:41.167696 Avaya Aura Experience Portal XSS vulnerabilities
MEDIUM (5.3)
Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
Published: 2021-06-24T08:55:32.000Z
Updated: 2024-08-03T20:11:28.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25655 vulnerable 2026-06-08 05:30:41.165998 URL redirection to untrusted site possible in Avaya Aura Experience Portal
MEDIUM (4.4)
A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
Published: 2021-06-24T08:55:31.000Z
Updated: 2024-08-03T20:11:27.870Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.