CVE-2021-25656 MEDIUM

CVE-2021-25656: Avaya Aura Experience Portal XSS vulnerabilities

Vendor Avaya
Product Product
Weakness CWE-79 · XSS
Published June 24, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).

Key dates

02Disclosure timeline

June 24, 2021 CVE published
August 3, 2024 Record updated