Avaya Equinox Conferencing vulnerabilities

3 CVEs affecting Avaya Equinox Conferencing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7038, published 2021-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7038, published 2021-04-28. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard…
CVE-2020-7037, published 2021-04-28. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on…
CVE-2020-7033, published 2020-11-13. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions…