CVE-2020-7033: Avaya Equinox Conferencing XSS

Q: What is CVE-2020-7033?

CVE-2020-7033 is a Cross Site Scripting (XSS) vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing.

Q: How does CVE-2020-7033 affect Avaya Equinox Conferencing?

CVE-2020-7033 allows an authenticated user to perform XSS attacks on Avaya Equinox Conferencing.

Q: What is the severity of CVE-2020-7033?

CVE-2020-7033 has a severity rating of medium with a CVSS score of 5.4.

Q: How can I fix CVE-2020-7033?

To fix CVE-2020-7033, upgrade to Avaya Equinox Conferencing version 9.1.10 or later.

Q: Where can I find more information about CVE-2020-7033?

More information about CVE-2020-7033 can be found at https://downloads.avaya.com/css/P8/documents/101072147.

Published Nov 12, 2020

Updated

A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10.

Affected Software

1 affected component

Avaya Equinox Conferencing>=9.0.0<9.1.10

Event History

Nov 12, 2020

CVE Published

via MITRE·11:55 PM

Data Sourced

via MITRE·11:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-7033?

CVE-2020-7033 is a Cross Site Scripting (XSS) vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing.

How does CVE-2020-7033 affect Avaya Equinox Conferencing?

CVE-2020-7033 allows an authenticated user to perform XSS attacks on Avaya Equinox Conferencing.

What is the severity of CVE-2020-7033?

CVE-2020-7033 has a severity rating of medium with a CVSS score of 5.4.

How can I fix CVE-2020-7033?

To fix CVE-2020-7033, upgrade to Avaya Equinox Conferencing version 9.1.10 or later.

Where can I find more information about CVE-2020-7033?