CVE-2020-7033 — MEDIUM (6.3)

Q: How severe is CVE-2020-7033?

CVE-2020-7033 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2020-7033?

Check the references section above for vendor advisories and patch information. Affected products include: Avaya Equinox Conferencing.

Vulnerability Description

A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10.

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Avaya	Equinox Conferencing	>= 9.0.0, < 9.1.10

Related Weaknesses (CWE)

CWE-79

References

https://downloads.avaya.com/css/P8/documents/101072147Vendor Advisory
https://downloads.avaya.com/css/P8/documents/101072147Vendor Advisory

FAQ

What is CVE-2020-7033?

CVE-2020-7033 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of...

How severe is CVE-2020-7033?

CVE-2020-7033 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-7033?

Check the references section above for vendor advisories and patch information. Affected products include: Avaya Equinox Conferencing.