CVE-2020-7035

CVE-2020-7035 describes an XML External Entities (XXE) vulnerability in the web-based user interface of Avaya Aura Orchestration Designer. An authenticated, remote attacker can gain read access to information stored on an affected system. Affected are Avaya Aura Orchestration Designer 7.x version...

CVE-2018-15613

Affected software: Avaya Aura Orchestration Designer (Runtime Config component). Vulnerability: Cross-site scripting (XSS) that could cause malicious content to be returned to the user. Root cause / affected version range: Any affected versions up to 7.2.1. Impact (as stated): Potential exposure ...