CVE-2020-7036

🗓️ 23 Apr 2021 21:00:20Reported by avayaType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 34 Views

An XXE vulnerability in Callback Assist allows remote attackers to access stored information. Affected versions: 4.0.x to 4.7.1.1 Patch 7

Reporter	Title	Published	Views	Family All 5
CNNVD	Avaya Callback Assist 代码问题漏洞	23 Apr 202100:00	–	cnnvd
Cvelist	CVE-2020-7036 XXE in Avaya Callback Assist Administration	23 Apr 202121:00	–	cvelist
EUVD	EUVD-2020-28170	7 Oct 202500:30	–	euvd
NVD	CVE-2020-7036	23 Apr 202121:15	–	nvd
Prion	Xxe	23 Apr 202121:15	–	prion

NVD

Node

avaya callback_assistRange4.0.0–4.7.1.1

avaya callback_assistMatch4.7.1.1-

avaya callback_assistMatch4.7.1.1patch1

avaya callback_assistMatch4.7.1.1patch2

avaya callback_assistMatch4.7.1.1patch3

avaya callback_assistMatch4.7.1.1patch4

avaya callback_assistMatch4.7.1.1patch5

avaya callback_assistMatch4.7.1.1patch6

[
  {
    "product": "Callback Assist",
    "vendor": "Avaya",
    "versions": [
      {
        "lessThan": "4.7.1.1",
        "status": "affected",
        "version": "4.0.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
downloads	www.downloads.avaya.com/css/P8/documents/101075450

21 Nov 2024 05:36Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24

CVSS 3.16.5 - 8.1

EPSS0.00242

CWE-611