CVE-2020-7037CWE-611

Avaya Equinox Conferencing XXE vulnerability

High · published April 28, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
64.4
In the wild
Unconfirmed
What it is

An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01064 · 64.4th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2021-04-28T21:30Z
EPSS history
Timeline
  • 28 APR 21:30Z
    Avaya Equinox Conferencing XXE vulnerability
    cvelistv5