CVE-2019-7000: Avaya Aura Conferencing XSS

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-31 · updated 2026-06-17
Weakness: CWE-79

Description

A Cross-Site Scripting (XSS) vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 (8.0.14). Prior versions not listed were not evaluated.

Affected products

Avaya Equinox Conferencing Management (iView): through 8.0; 8.0, 8.0-sp10, 8.0-sp11, 8.0-sp12, 8.0-sp13, 8.0-sp2 (+4)

References

https://downloads.avaya.com/css/P8/documents/101060208
https://downloads.avaya.com/css/P8/documents/101060208

Get alerted when CVE-2019-7000 or the next vulnerability affects your stack