CVE-2023-32218mediumCWE-601

CVE-2023-32218: medium-severity vulnerability in Avaya IX Workforce Engagement

Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Published · Updated

Follow this CVE+ Monitor IX Workforce Engagement

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.3%
Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Avaya · IX Workforce Engagement
Related CVEs — Avaya IX Workforce Engagement

In the same product, most dangerous first.

CVE-2023-31187MEDIUMAvaya IX Workforce Engagement - CWE-522: Insufficiently Protected CredentialsEPSS 0.5%CVE-2023-31186MEDIUMAvaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response DiscrepancyEPSS 0.4%