High severity8.1NVD Advisory· Published Apr 28, 2021· Updated Jun 17, 2026
CVE-2020-7037
CVE-2020-7037
Description
An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Avaya/Avaya Meetings Serverv5Range: 9.x
<9.1.11+ 1 more
- (no CPE)range: <9.1.11
- cpe:2.3:a:avaya:equinox_conferencing:*:*:*:*:*:*:*:*range: >=9.0.0,<9.1.11
- Range: <9.1.11
Patches
Vulnerability mechanics
References
1- support.avaya.com/css/P8/documents/101075574nvdVendor Advisory
News mentions
0No linked articles in our index yet.