CVE-2020-7036

6.5 mediumEPSS 1.0%

Medium (6.5) in avaya callback assist. EPSS 1.0% chance of exploitation in the next 30 days.

An XML External Entities (XXE)vulnerability in Callback Assist could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Callback Assist includes all 4.0.x versions before 4.7.1.1 Patch 7.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2021-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:callback_assist

References

https://downloads.avaya.com/css/P8/documents/101075450
https://downloads.avaya.com/css/P8/documents/101075450

Check your stack JSON