CVE-2020-7035 XXE in Avaya Aura Orchestration Designer

An XML External Entities XXEvulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Orchestration Designer includes all 7.x...

CVE-2020-7035

CVE-2020-7035 describes an XML External Entities (XXE) vulnerability in the web-based user interface of Avaya Aura Orchestration Designer. An authenticated, remote attacker can gain read access to information stored on an affected system. Affected are Avaya Aura Orchestration Designer 7.x version...

CVE-2020-7036 XXE in Avaya Callback Assist Administration

An XML External Entities XXEvulnerability in Callback Assist could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Callback Assist includes all 4.0.x versions before 4.7.1.1 Patch 7...

CVE-2020-7034 Command injection in Avaya Session Border Controller for Enterprise

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for...

CVE-2020-7034

The CVE-2020-7034 entry describes a command injection vulnerability in Avaya Session Border Controller for Enterprise (SBCE). An authenticated, remote attacker could send specially crafted messages to execute arbitrary commands with the affected system’s privileges. Affected versions are SBCE 7.x...

Avaya Callback Assist 代码问题漏洞

Avaya Callback Assist is a software application from Avaya, USA. With Avaya Callback Assist, contact centers can offer callback options to callers during peak call periods when estimated wait times are highest A code issue vulnerability exists in Callback Assist includes 4.0.x Series 4.7.1.1 prio...

PT-2021-12636 · Avaya · Avaya Session Border Controller For Enterprise

Name of the Vulnerable Software and Affected Versions: Avaya Session Border Controller for Enterprise versions 7.x through 8.1.1.x Description: A command injection issue could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affect...

Avaya Session Border Controller for Enterprise 命令注入漏洞

Avaya Session Border Controller for Enterprise is a firewall from the American company Avaya. a flexible, purpose-built enterprise solution-includes a set of standard security features. A command injection vulnerability exists in Avaya Session Border Controller that could allow an authenticated,...

Avaya Aura Orchestration Designer 代码问题漏洞

Aura Orchestration Designer is a full-featured graphical development environment for creating applications that run on Avaya Aura-related products. An XML external entity injection vulnerability exists in the web user interface of Avaya Aura Orchestration Designer. An attacker could use this...

Recommended configurations for Linux Thin Client when experiencing audio delays

Experiencing audio delays when using a Linux based thin client with a IP phone applications for example using Avaya...

Web-Sesame Security Vulnerability

TIL Web-Sesame is a device from the French company Avaya TIL that allows unified monitoring and management of all information and electronically controlled devices in a building. The device can be connected to several monitoring terminals for management. A security vulnerability exists in...

Avaya Equinox Conferencing Cross-Site Scripting Vulnerability

Avaya Equinox Conferencing is a conferencing support software from Avaya, USA. The software is a universal solution that includes all Avaya soft clients with the convergence of Avaya Aura Conferencing and Scopia for cell phones, browsers, desktops and conference room systems. A cross-site scripti...

Avaya Web License Manager XML Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Blind Out-Of-Band XML External Entity Injection Authenticated product: Avaya Web License Manager vulnerable version: 6.x, 7.0 through 7.1.3.6, 8.0 through 8.1.2.0.0 fixed...

CVE-2020-7032

An XML external entity XXE vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2...

CVE-2020-7032

An XML external entity XXE vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2...

Server side request forgery (ssrf)

An XML external entity XXE vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2...

CVE-2020-7032 Avaya WebLM Improper Restriction of XML External Entity Reference

An XML external entity XXE vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2...

CVE-2020-7032

CVE-2020-7032 describes an XML External Entity (XXE) vulnerability in Avaya WebLM admin interface. Authenticated users can exploit a crafted DTD in an XML request to read arbitrary files or perform server-side request forgery (SSRF). Affected versions are Avaya WebLM 7.0–7.1.3.6 and 8.0–8.1.2. Th...

CVE-2020-7033

A Cross Site Scripting XSS Vulnerability on the Unified Portal Client web client used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10...

CVE-2020-7033

A Cross Site Scripting XSS Vulnerability on the Unified Portal Client web client used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10...