7.1.1

DATE	CVE	VULNERABILITY TITLE	RISK
2020-08-11	CVE-2020-7029	Cross-Site Request Forgery (CSRF) vulnerability in Avaya Aura Communication Manager and Aura Messaging A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. network avaya CWE-352	6.8
2019-02-01	CVE-2018-15617	Unspecified vulnerability in Avaya Aura Communication Manager A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. network low complexity avaya	5.0
2018-09-27	CVE-2018-15611	Unspecified vulnerability in Avaya Aura Communication Manager A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. local low complexity avaya	7.2