CVE-2019-7001

8.8 highEPSS 1.2%

High (8.8) in avaya ip office contact center. EPSS 1.2% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users on the system. Affected versions of IP Office Contact Center include all 9.x and 10.x versions prior to 10.1.2.2.2-11201.1908. Unsupported versions not listed here were not evaluated.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2019-04-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:ip_office_contact_center

References

https://downloads.avaya.com/css/P8/documents/101056762
https://downloads.avaya.com/css/P8/documents/101056762

Check your stack JSON