CVE-2018-15611: Avaya Aura Communication Manager

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.

Affected products

• Avaya Aura Communication Manager: from 6.3.0.1, up to and including 6.3.17.0; from 7.0, before 7.1.3.1 (fixed in 7.1.3.1)

Published 2018-09-27. Last modified 2026-06-17.