Avaya Ix Workforce Engagement — known CVE vulnerabilities

Every CVE whose affected-product data names Avaya Ix Workforce Engagement, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-31187 — CVSS 6.5 (medium): Avaya IX Workforce Engagement v15.2.7.1195 - CWE-522: Insufficiently Protected Credentials
• CVE-2023-32218 — CVSS 6.1 (medium): Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
• CVE-2023-31186 — CVSS 5.3 (medium): Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy