{"cve":{"cve_id":"CVE-2018-15611","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00297,"epss_percentile":0.21133,"epss_as_of":"2026-06-23","description":"A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.","published_at":"2018-09-27T23:00:00Z","last_modified_at":null,"cvss_v3_score":6.3,"cvss_v3_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-284"],"nvd_references":["https://downloads.avaya.com/css/P8/documents/101052550"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:10:53.568548Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"L","value_label":"Local"},{"metric":"AC","name":"Attack Complexity","value":"H","value_label":"High"},{"metric":"PR","name":"Privileges Required","value":"H","value_label":"High"},{"metric":"UI","name":"User Interaction","value":"R","value_label":"Required"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"avaya","vendor_name":"Avaya","product_slug":"communication-manager","product_name":"Communication Manager","version_start":"7.1.3.1","version_start_inclusive":true,"version_end":"7.x*","version_end_inclusive":false,"cpe23_uri":"cve5:avaya:communication-manager:7.1.3.1:7.x*"},{"vendor_slug":"avaya","vendor_name":"Avaya","product_slug":"communication-manager","product_name":"Communication Manager","version_start":"6.3.x","version_start_inclusive":true,"version_end":"6.3.x*","version_end_inclusive":false,"cpe23_uri":"cve5:avaya:communication-manager:6.3.x:6.3.x*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://downloads.avaya.com/css/P8/documents/101052550","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2018-09-27T23:00:00Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T16:57:42.003620Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T16:57:42.003620Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T16:57:42.003620Z","label":"CVSS score revised","source":"cvelistv5"}]}