Xxe

2021-04-2321:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.1%

JSON

An XML External Entities (XXE)vulnerability in Callback Assist could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Callback Assist includes all 4.0.x versions before 4.7.1.1 Patch 7.

CPENameOperatorVersion
callback_assisteq4.7.1.1
callback_assisteq4.7.1.1 patch2
callback_assisteq4.7.1.1 patch3
callback_assisteq4.7.1.1 patch4
callback_assisteq4.7.1.1 patch5
callback_assisteq4.7.1.1 patch6
callback_assisteq4.7.1.1 patch1
callback_assistge4.0.0
callback_assistlt4.7.1.1

Name	Operator	Version
callback_assist	eq	4.7.1.1
callback_assist	eq	4.7.1.1 patch2
callback_assist	eq	4.7.1.1 patch3
callback_assist	eq	4.7.1.1 patch4
callback_assist	eq	4.7.1.1 patch5
callback_assist	eq	4.7.1.1 patch6
callback_assist	eq	4.7.1.1 patch1
callback_assist	ge	4.0.0
callback_assist	lt	4.7.1.1

References

downloads.avaya.com/css/P8/documents/101075450