Vulnerabilities

TI-2023-15517 CVE-2023-32218 · GHSA-m7gj-4v6m-jjgw

Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

LOW 27

Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00335 Published 2023-05-30 No fix listed CWE-601

TI-2023-14897 CVE-2023-31187 · GHSA-57hv-vqrf-h67f

LOW 29

Avaya IX Workforce Engagement v15.2.7.1195 - CWE-522: Insufficiently Protected Credentials

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00474 Published 2023-05-30 No fix listed CWE-522

TI-2023-14896 CVE-2023-31186 · GHSA-jvq2-w86q-pw44

LOW 30

Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0045 Published 2023-05-30 No fix listed CWE-204