Avaya IP Office Contact Center vulnerabilities

2 CVEs affecting Avaya IP Office Contact Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-7001, published 2019-04-04.

More from Avaya.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-12969, published 2017-11-10. High severity, CVSS 8.8. EPSS: 10.1% chance of exploitation in the next 30 days. Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or…
• CVE-2019-7001, published 2019-04-04. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users on the system.…