Vulnerabilities > Avaya > IP Office > 11.0

DATE CVE VULNERABILITY TITLE RISK
2020-08-07 CVE-2019-7005 Unspecified vulnerability in Avaya IP Office
A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information.
network
low complexity
avaya
7.5
7.5
2020-06-04 CVE-2020-7030 Information Exposure vulnerability in Avaya IP Office
A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component.
local
low complexity
avaya CWE-200
2.1
2.1
2019-01-23 CVE-2018-15614 Cross-site Scripting vulnerability in Avaya IP Office 10.0/10.1/11.0
A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users.
network
avaya CWE-79
3.5
3.5