« Volver al listado

CVE-2020-7032

Estado: ModificadaMedia (6.5)—

An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Avaya — Aura System ManagerAvaya — Weblm

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-7032",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "securityalerts@avaya.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "securityalerts@avaya.com",
      "affectedData": [
        {
          "vendor": "Avaya",
          "product": "WebLM",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.x"
            },
            {
              "status": "affected",
              "version": "7.0",
              "lessThan": "7.1.3.6",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "8.1",
              "lessThan": "8.1.2",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Avaya",
          "product": "System Manager",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.x"
            },
            {
              "status": "affected",
              "version": "7.0",
              "lessThan": "7.1.3.6",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "8.1",
              "lessThan": "8.1.2",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-11-13T01:15:11.917",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/160123/Avaya-Web-License-Manager-XML-Injection.html",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "securityalerts@avaya.com"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2020/Nov/31",
      "tags": [
        "Exploit",
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "securityalerts@avaya.com"
    },
    {
      "url": "https://downloads.avaya.com/css/P8/documents/101072249",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "securityalerts@avaya.com"
    },
    {
      "url": "https://sec-consult.com/vulnerability-lab/advisory/blind-out-of-band-xml-external-entity-injection-in-avaya-web-license-manager/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "securityalerts@avaya.com"
    },
    {
      "url": "http://packetstormsecurity.com/files/160123/Avaya-Web-License-Manager-XML-Injection.html",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2020/Nov/31",
      "tags": [
        "Exploit",
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://downloads.avaya.com/css/P8/documents/101072249",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://sec-consult.com/vulnerability-lab/advisory/blind-out-of-band-xml-external-entity-injection-in-avaya-web-license-manager/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "securityalerts@avaya.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de tipo XML external entity (XXE) en la interfaz de administración de Avaya WebLM, permite a usuarios autenticados leer archivos arbitrarios o realizar ataques de tipo server-side request forgery (SSRF) por medio de un DTD diseñado en una petición XML. Las versiones afectadas de Avaya WebLM incluyen: versiones 7.0 hasta 7.1.3.6 y versiones 8.0 hasta 8.1.2"
    }
  ],
  "lastModified": "2026-06-17T03:24:08.557",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21B18730-A7F9-4857-A3B8-89BA90EB8D03",
              "versionEndIncluding": "7.1.3.6",
              "versionStartIncluding": "7.0"
            },
            {
              "criteria": "cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "677058A7-D285-4935-9C4D-1819A65384D9",
              "versionEndIncluding": "8.1.2",
              "versionStartIncluding": "8.0"
            },
            {
              "criteria": "cpe:2.3:a:avaya:weblm:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3D62170-8860-4BE3-85F4-8E96AD2AC10B",
              "versionEndIncluding": "7.1.3.6",
              "versionStartIncluding": "7.0"
            },
            {
              "criteria": "cpe:2.3:a:avaya:weblm:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8AE0ED15-0CF5-41F5-91DA-17464A86DCE7",
              "versionEndExcluding": "8.1.3",
              "versionStartIncluding": "8.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "securityalerts@avaya.com"
}