VULNERABILITY INTELLIGENCE

CVE-2020-7033

CVSS score6.3 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2020-11-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

Description

A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10.

Weakness classification

  • securityalerts@avaya.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references