CVE-2021-25656: Avaya Aura Experience Portal XSS vulnerabilities
Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-25656?
CVE-2021-25656 is a stored XSS injection vulnerability discovered in the Avaya Aura Experience Portal Web management.
How can the stored XSS injection vulnerability in Avaya Aura Experience Portal be exploited?
An authenticated user can potentially exploit the vulnerability to disclose sensitive information.
Which versions of Avaya Aura Experience Portal are affected by CVE-2021-25656?
Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
What is the severity of CVE-2021-25656?
The severity of CVE-2021-25656 is medium with a CVSS score of 5.4.
How can I fix the stored XSS injection vulnerability in Avaya Aura Experience Portal?
Apply the necessary hotfix for affected versions 7.0 through 7.2.3 and version 8.0.0 of Avaya Aura Experience Portal.