{"id":"CVE-2018-15613","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-15613","generatedAt":"2026-10-28T19:03:06.247Z","title":"A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user.","description":"A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.","published":"2018-09-21T17:29:06.000Z","lastModified":"2026-06-17T01:42:51.000Z","status":"Modified","sourceIdentifier":"securityalerts@avaya.com","cvss":{"version":"3.0","score":6.1,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["avaya/aura orchestration designer"],"epss":{"score":0.00772,"percentile":0.55488,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.77%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://downloads.avaya.com/css/P8/documents/101052293","tags":["Patch","Vendor Advisory"],"source":"securityalerts@avaya.com"},{"url":"https://downloads.avaya.com/css/P8/documents/101052293","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-15613","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}