CVE-2018-15614: falha de média gravidade em Avaya IP Office
IP Office one-X Portal XSS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.6%
A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Office include 10.0 through 10.1 SP3 and 11.0 versions prior to 11.0 SP1.
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Avaya · IP OfficeCVEs relacionadas — Avaya IP Office
No mesmo produto, das mais perigosas para as menos.
CVE-2018-15610HIGHImproper access controls in IP Office one-X PortalEPSS 1.8%CVE-2019-7005MEDIUMUnauthenticated Information Disclosure Vulnerability in IP OfficeEPSS 1.2%CVE-2020-7030MEDIUMIPO Information DisclosureEPSS 1.0%CVE-2024-4197CRITICALAvaya IP Office One-X Portal File Upload VulnerabilityEPSS 0.8%CVE-2024-4196CRITICALAvaya IP Office Web Control RCE VulnerabilityEPSS 0.6%CVE-2021-25657HIGHAvaya IP Office Privilege Escalation VulnerabilityEPSS 0.3%