CVE-2020-7037
High
Description
An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server.
SeverityHigh
CVSS8.1
Exploit probability—
ProductAvaya Equinox Conferencing
PublishedApr 28, 2021
First seenApr 28, 2021
Weakness typeCWE-611XML external entity (XXE)
How to fix
Update
- avaya equinox_conferencing9.1.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya equinox_conferencing | 9.0.0 ≤ v < 9.1.11 | 9.1.11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.