Product by Avaya
Aura Experience Portal
9 known vulnerabilities in Aura Experience Portal (Avaya), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-34966 | Samba: infinite loop in mdssvc rpc service for spotlight | 7.5 | |
| Medium | CVE-2023-34967 | Samba: type confusion in mdssvc rpc service for spotlight | 5.3 | |
| High | CVE-2016-5285 | Mozilla Network Security Services: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2022-2127 | Samba: out-of-bounds read in winbind auth_crap | 5.9 | |
| Medium | CVE-2023-34968 | Samba: spotlight server-side share path disclosure | 5.3 | |
| Medium | CVE-2023-3347 | Samba: smb2 packet signing is not enforced when "server signing = required" is set | 5.9 | |
| Medium | CVE-2023-7031 | Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities | 5.7 | |
| Medium | CVE-2021-25656 | Avaya Aura Experience Portal XSS vulnerabilities | 5.3 | |
| Medium | CVE-2021-25655 | URL redirection to untrusted site possible in Avaya Aura Experience Portal | 4.4 |