CVE-2018-15611

6.7 mediumEPSS 0.3%

Medium (6.7) in avaya aura communication manager. EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.

Severity

CVSS 3.0

6.7 medium

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2018-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_communication_manager

References

https://downloads.avaya.com/css/P8/documents/101052550
https://downloads.avaya.com/css/P8/documents/101052550

Check your stack JSON