VendorsAvayaaura_experience_portalall versions
Vulnerabilities

Avaya Aura Experience Portal

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2016-5285
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
Published 2019-11-15 · Modified
7.5EPSS 0.023
CVE-2021-25655
URL redirection to untrusted site possible in Avaya Aura Experience Portal
Published 2021-06-24 · Modified
6.1EPSS 0.004
CVE-2023-7031
Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities
Published 2024-01-17 · Modified
5.7EPSS 0.003
CVE-2021-25656
Avaya Aura Experience Portal XSS vulnerabilities
Published 2021-06-24 · Modified
5.4EPSS 0.003