{"id":"CVE-2018-15611","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-15611","generatedAt":"2026-10-29T01:55:23.754Z","title":"A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges.","description":"A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.","published":"2018-09-27T23:29:00.000Z","lastModified":"2026-06-17T01:42:50.000Z","status":"Modified","sourceIdentifier":"securityalerts@avaya.com","cvss":{"version":"3.0","score":6.7,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-284"],"affected":["avaya/aura communication manager"],"epss":{"score":0.00297,"percentile":0.22184,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://downloads.avaya.com/css/P8/documents/101052550","tags":["Vendor Advisory"],"source":"securityalerts@avaya.com"},{"url":"https://downloads.avaya.com/css/P8/documents/101052550","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-15611","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}