CVE-2020-7032

PoC ×3—

CVSS 3.1

6.5 medium

EPSS

3%p86

Published

Nov 13, 2020 (Nov 13, 2020)

Modified

Jun 17, 2026

Description

An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2.

Vendors: avaya
Products: aura system manager, weblm
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news0 stories

No ingested article mentions this CVE yet.