CVE-2020-7035

6.5 mediumEPSS 1.1%

Medium (6.5) in avaya aura orchestration designer. EPSS 1.1% chance of exploitation in the next 30 days.

An XML External Entities (XXE)vulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Orchestration Designer includes all 7.x versions before 7.2.3.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2021-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_orchestration_designer

References

https://downloads.avaya.com/css/P8/documents/101075450
https://downloads.avaya.com/css/P8/documents/101075450

Check your stack JSON