What’s Vulnerable › Vulnerabilities

CVE-2019-7007: Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-28 · updated 2026-06-17
• Weakness: CWE-22

Description

A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server.

Affected products

• Avaya Equinox Conferencing Management (iView): from 9.0 through 9.1.9.0

References

• https://downloads.avaya.com/css/P8/documents/101064450
• https://downloads.avaya.com/css/P8/documents/101064450

Get alerted when CVE-2019-7007 or the next vulnerability affects your stack