CVE-2019-7000

6.1 mediumEPSS 1.1%

Medium (6.1) in avaya aura conferencing. EPSS 1.1% chance of exploitation in the next 30 days.

A Cross-Site Scripting (XSS) vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 (8.0.14). Prior versions not listed were not evaluated.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-07-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_conferencing

References

https://downloads.avaya.com/css/P8/documents/101060208
https://downloads.avaya.com/css/P8/documents/101060208

Check your stack JSON