CVE-2020-7035CWE-611

XXE in Avaya Aura Orchestration Designer

High · published April 23, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

An XML External Entities (XXE)vulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Orchestration Designer includes all 7.x versions before 7.2.3.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01067 · 64.5th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2021-04-23T21:00Z
EPSS history
Timeline
  • 23 APR 21:00Z
    XXE in Avaya Aura Orchestration Designer
    cvelistv5