Vulnerabilities > Avaya > Weblm

DATE CVE VULNERABILITY TITLE RISK
2020-11-13 CVE-2020-7032 XXE vulnerability in Avaya Aura System Manager and Weblm
An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
network
low complexity
avaya CWE-611
6.5