CVE-2020-7032

概要

参考情報

• packetstormsecurity.com/files/160123/Avaya-Web-License-Manager-XML-Injection.html · Exploit
• seclists.org/fulldisclosure/2020/Nov/31 · Exploit
• downloads.avaya.com/css/P8/documents/101072249 · Vendor Advisory
• sec-consult.com/vulnerability-lab/advisory/blind-out-of-band-xml-external-entity-injection-in-avaya-web-license-manager · Exploit

aura system manager のその他の脆弱性

• CVE-2024-7480中 4.4An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with a…
• CVE-2024-7477中 6.7A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbi…
• CVE-2016-5285高 7.5A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ss…
• CVE-2010-2943高 8.1The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows…
• CVE-2010-2942中 5.5The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain …