PT-2020-19348 · Avaya · Avaya Weblm

Name of the Vulnerable Software and Affected Versions: Avaya WebLM versions 7.0 through 7.1.3.6 Avaya WebLM versions 8.0 through 8.1.2 Description: An XML external entity XXE vulnerability in the Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side...