CVE-2019-7005: falha de média gravidade em Avaya IP Office
Unauthenticated Information Disclosure Vulnerability in IP Office
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 1.2%
A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Avaya · IP OfficeCVEs relacionadas — Avaya IP Office
No mesmo produto, das mais perigosas para as menos.
CVE-2018-15610HIGHImproper access controls in IP Office one-X PortalEPSS 1.8%CVE-2020-7030MEDIUMIPO Information DisclosureEPSS 1.0%CVE-2024-4197CRITICALAvaya IP Office One-X Portal File Upload VulnerabilityEPSS 0.8%CVE-2018-15614MEDIUMIP Office one-X Portal XSSEPSS 0.6%CVE-2024-4196CRITICALAvaya IP Office Web Control RCE VulnerabilityEPSS 0.6%CVE-2021-25657HIGHAvaya IP Office Privilege Escalation VulnerabilityEPSS 0.3%