CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7032

An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 70.4%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 5.5

References

Products affected by CVE-2020-7032

Avaya » Aura System Manager » Version: 7.0

cpe:2.3:a:avaya:aura_system_manager:7.0
Avaya » Aura System Manager » Version: 7.0.1.3

cpe:2.3:a:avaya:aura_system_manager:7.0.1.3
Avaya » Aura System Manager » Version: 7.1

cpe:2.3:a:avaya:aura_system_manager:7.1
Avaya » Aura System Manager » Version: 7.1.1

cpe:2.3:a:avaya:aura_system_manager:7.1.1
Avaya » Aura System Manager » Version: 7.1.1.1

cpe:2.3:a:avaya:aura_system_manager:7.1.1.1
Avaya » Aura System Manager » Version: 7.1.2

cpe:2.3:a:avaya:aura_system_manager:7.1.2
Avaya » Aura System Manager » Version: 7.1.3

cpe:2.3:a:avaya:aura_system_manager:7.1.3
Avaya » Aura System Manager » Version: 7.1.3.1

cpe:2.3:a:avaya:aura_system_manager:7.1.3.1
Avaya » Aura System Manager » Version: 7.1.3.2

cpe:2.3:a:avaya:aura_system_manager:7.1.3.2
Avaya » Aura System Manager » Version: 7.1.3.3

cpe:2.3:a:avaya:aura_system_manager:7.1.3.3
Avaya » Aura System Manager » Version: 7.1.3.4

cpe:2.3:a:avaya:aura_system_manager:7.1.3.4
Avaya » Aura System Manager » Version: 7.1.3.5

cpe:2.3:a:avaya:aura_system_manager:7.1.3.5
Avaya » Aura System Manager » Version: 7.1.3.6

cpe:2.3:a:avaya:aura_system_manager:7.1.3.6
Avaya » Aura System Manager » Version: 8.0

cpe:2.3:a:avaya:aura_system_manager:8.0
Avaya » Aura System Manager » Version: 8.0.1

cpe:2.3:a:avaya:aura_system_manager:8.0.1
Avaya » Aura System Manager » Version: 8.0.1.1

cpe:2.3:a:avaya:aura_system_manager:8.0.1.1
Avaya » Aura System Manager » Version: 8.0.1.2

cpe:2.3:a:avaya:aura_system_manager:8.0.1.2
Avaya » Aura System Manager » Version: 8.1

cpe:2.3:a:avaya:aura_system_manager:8.1
Avaya » Aura System Manager » Version: 8.1.1

cpe:2.3:a:avaya:aura_system_manager:8.1.1
Avaya » Aura System Manager » Version: 8.1.2

cpe:2.3:a:avaya:aura_system_manager:8.1.2
Avaya » Weblm » Version: 7.0

cpe:2.3:a:avaya:weblm:7.0
Avaya » Weblm » Version: 7.1.3.6

cpe:2.3:a:avaya:weblm:7.1.3.6
Avaya » Weblm » Version: 8.1.2

cpe:2.3:a:avaya:weblm:8.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7032

Products

Pricing

Contact Us