CVE-2018-15617: Avaya Aura Communication Manager

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versions prior to 8.0.1.

Affected products

• Avaya Aura Communication Manager: from 6.3.0.1, up to and including 6.3.17.0; from 7.0, before 7.1.3.2 (fixed in 7.1.3.2); from 8.0, before 8.0.1 (fixed in 8.0.1)

Published 2019-02-01. Last modified 2026-06-17.