CVE-2018-15613

6.1 mediumEPSS 0.8%

A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-09-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_orchestration_designer

References

https://downloads.avaya.com/css/P8/documents/101052293
https://downloads.avaya.com/css/P8/documents/101052293

Check your stack JSON