Avaya Spaces vulnerabilities

2 CVEs affecting Avaya Spaces, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-12756, published 2025-02-11.

More from Avaya.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-12755, published 2025-02-11. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. A Cross-Site Scripting (XSS) vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information.
• CVE-2024-12756, published 2025-02-11. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user.