CVE-2020-7037: Avaya Equinox Conferencing XXE vulnerability
An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-7037?
CVE-2020-7037 is an XML External Entities (XXE) vulnerability in the Media Server component of Avaya Equinox Conferencing.
What is the severity of CVE-2020-7037?
CVE-2020-7037 has a severity score of 8.1, which is considered high.
How does CVE-2020-7037 impact Avaya Equinox Conferencing?
CVE-2020-7037 allows an authenticated, remote attacker to gain read access to information stored on an affected system, and could potentially lead to a denial of service.
What versions of Avaya Equinox Conferencing are affected by CVE-2020-7037?
Avaya Equinox Conferencing versions between 9.0.0 and 9.1.11 are affected by CVE-2020-7037.
How can I fix CVE-2020-7037?
To fix CVE-2020-7037, it is recommended to apply the necessary patches or updates provided by Avaya Equinox Conferencing.