CVE-2018-15613highCWE-79

CVE-2018-15613: high-severity vulnerability in Avaya Orchestration Designer

Orchestration Designer Runtime Config XSS

Published · Updated

Follow this CVE+ Monitor Orchestration Designer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.3epss 0.8%
A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Avaya · Orchestration Designer
Related CVEs — Avaya Orchestration Designer

In the same product, most dangerous first.

CVE-2018-15612HIGHOrchestration Designer Runtime Config CSRFEPSS 0.4%