Avaya Vulnerabilities and Affected Products
Vulnerabilities associated with Avaya Aura® System Platform.
Products
Clear product- IP Office7 vulnerabilities
- Avaya Aura Utility Services3 vulnerabilities
- ip600_media_servers3 vulnerabilities
- IX Workforce Engagement3 vulnerabilities
- Aura System Manager2 vulnerabilities
- Avaya Aura Appliance Virtualization Platform Utilities2 vulnerabilities
- Avaya Aura Communication Manager2 vulnerabilities
- Avaya Call Management System2 vulnerabilities
- Avaya Spaces2 vulnerabilities
- Communication Manager2 vulnerabilities
- ip_office2 vulnerabilities
- Orchestration Designer2 vulnerabilities
- Aura Device Services1 vulnerability
- Aura Orchestration Designer1 vulnerability
- aura_device_services1 vulnerability
- aura_system_manager1 vulnerability
- aura_utility_services1 vulnerability
- Avaya Aura Application Enablement Services1 vulnerability
- Avaya Aura Conferencing1 vulnerability
- Avaya Aura Devices Services1 vulnerability
- Avaya Aura Messaging1 vulnerability
- Avaya Aura® System Platform1 vulnerability
- Avaya Control Manager1 vulnerability
- Avaya Equinox Conferencing1 vulnerability
- Avaya Experience Portal1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2018-15616CRITICAL | System Platform Web UI DeserializationA vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2. CWE-502Oct 17, 2018 | CVSS9.0v3.0 | EPSS3.34% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |