medium5.4Public exploit code
CVE-2019-7004
A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially discl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting2020-02-24 · webapps · hardware
Impact
A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not evaluated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avaya | Ip Office Application Server | from 11.0 through 11.0.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/156476/Avaya-IP-Office-Application-Server-11.0.0.0-Cross-Site-Scripting.html
- https://support.avaya.com/css/P8/documents/101062833
- http://packetstormsecurity.com/files/156476/Avaya-IP-Office-Application-Server-11.0.0.0-Cross-Site-Scripting.html
- https://support.avaya.com/css/P8/documents/101062833