CVE-2018-15616

9.8 criticalEPSS 3.3%

A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2018-10-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:avaya_aura_system_platform

References

https://downloads.avaya.com/css/P8/documents/101052865
https://downloads.avaya.com/css/P8/documents/101052865

Check your stack JSON