PT-2018-13119 · Avaya · Avaya Aura Orchestration Designer

Alessandro Freri · Publicado 2018-09-21 · Atualizado 2019-10-09 · CVE-2018-15613

Positive Technologies (AI Summary)

CVSS v3.1

8.3

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avaya Aura Orchestration Designer versions prior to 7.2.1

Description A cross-site scripting (XSS) issue in the Runtime Config component could lead to malicious content being returned to the user.

Recommendations For versions prior to 7.2.1, update to version 7.2.1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-15613

Produtos afetados

Avaya Aura Orchestration Designer

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15613 · Nota de Segurança
• https://downloads.avaya.com/css/P8/documents/101052293 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-15613 · Aviso do Fabricante