CVE-2018-15613

A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.

Score

CVSS 3.0 8.3 High

Status

Modified - securityalerts@avaya.com

Published

2018-09-21

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Aura Orchestration Designer (Avaya)
• Orchestration Designer (Avaya)

References

• https://downloads.avaya.com/css/P8/documents/101052293