CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2018-6635
System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
- CWE
- CWE-326
- Published
- Modified
- Record from
- the NVD, synced
Affected
- avaya:aura