6.5
CVSSv2

CVE-2019-7001

Published: 04/04/2019 Updated: 09/10/2019
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated malicious user to retrieve or alter sensitive data related to other users on the system. Affected versions of IP Office Contact Center include all 9.x and 10.x versions before 10.1.2.2.2-11201.1908. Unsupported versions not listed here were not evaluated.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

avaya ip office contact center