critical9.0
CVE-2018-15616
A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack t…
Impact
A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avaya | Avaya Aura System Platform | from 6.3.0 through 6.3.9 from 6.4.0 through 6.4.2 |