CVE-2021-25655: URL redirection to untrusted site possible in Avaya Aura Experience Portal
Published Jun 24, 2021
·Updated
A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
Affected Software
2 affected components
Avaya Aura Experience Portal>=7.0<=7.2.3
Avaya Aura Experience Portal=8.0.0
Remediation
Patch Available
Event History
Jun 24, 2021
CVE Published
via MITRE·08:55 AM
Data Sourced
via MITRE·08:55 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Avaya Aura Experience Portal vulnerability?
The vulnerability ID for this Avaya Aura Experience Portal vulnerability is CVE-2021-25655.
2
What is the severity rating of CVE-2021-25655?
CVE-2021-25655 has a severity rating of 6.1 (medium severity).
3
Which component of Avaya Aura Experience Portal is affected by CVE-2021-25655?
CVE-2021-25655 affects the system Service Menu component of Avaya Aura Experience Portal.
4
What versions of Avaya Aura Experience Portal are affected by CVE-2021-25655?
Affected versions of Avaya Aura Experience Portal include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
5
How can I fix CVE-2021-25655?
To fix CVE-2021-25655, you should apply the necessary hotfix for affected versions of Avaya Aura Experience Portal.