CVE-2018-15615

MEDIUM 4.4CVE-2018-15615 · Published 24/09/2018 · updated 17/06/2026

In short

CVE-2018-15615 is a MEDIUM (CVSS 4.4) vulnerability affecting call management system supervisor (avaya).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
call management system supervisor avaya	`= 17.0.0= 18.0.1.0= 18.0.2.0`	No fix yet

Description

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x.

References

securityfocus.com/bid/105392 · Third Party Advisory
downloads.avaya.com/css/P8/documents/101052300 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free