TI-2018-11139 Aliases CVE-2018-15614 GHSA-28rm-36w9-mxrj

IP Office one-X Portal XSS

LOW 31CWE-79Published 2019-01-23 · Updated 2024-08-05

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: Cross-site scripting
Confidentiality · integrity · availability: High · High · None
Fix status: Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Office include 10.0 through 10.1 SP3 and 11.0 versions prior to 11.0 SP1.

Why it matters now

EPSS 0.00621 50th percentileScored 2026-11-07

Fix Fixed IP Office (Avaya): 11.0 SP1, 10.1 SP4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Avaya	IP Office	11.x to before 11.0 SP1; 10.x to before 10.1 SP4	11.0 SP1, 10.1 SP4	Patch available	CNA

IP Office VendorAvaya Affected 11.x to before 11.0 SP1; 10.x to before 10.1 SP4 Fixed in 11.0 SP1, 10.1 SP4 Patch available CNA

CPE configurations NVD · 13

CPE	Versions	Role	Vendor
cpe:2.3:a:avaya:ip_office:10.0:::::::*	10.0	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp1::::::	10.0 sp1	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp2::::::	10.0 sp2	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp3::::::	10.0 sp3	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp4::::::	10.0 sp4	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp5::::::	10.0 sp5	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp6::::::	10.0 sp6	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp7::::::	10.0 sp7	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.1:::::::*	10.1	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.1:sp1::::::	10.1 sp1	Vulnerable	Avaya

cpe:2.3:a:avaya:ip_office:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp1:*:*:*:*:*:* Versions 10.0 sp1 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp2:*:*:*:*:*:* Versions 10.0 sp2 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp3:*:*:*:*:*:* Versions 10.0 sp3 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp4:*:*:*:*:*:* Versions 10.0 sp4 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp5:*:*:*:*:*:* Versions 10.0 sp5 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp6:*:*:*:*:*:* Versions 10.0 sp6 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.0:sp7:*:*:*:*:*:* Versions 10.0 sp7 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.1:sp1:*:*:*:*:*:* Versions 10.1 sp1 Vulnerable ·Avaya

Show 3 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:avaya:ip_office:10.1:sp2::::::	10.1 sp2	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:10.1:sp3::::::	10.1 sp3	Vulnerable	Avaya
cpe:2.3:a:avaya:ip_office:11.0:::::::*	11.0	Vulnerable	Avaya

cpe:2.3:a:avaya:ip_office:10.1:sp2:*:*:*:*:*:* Versions 10.1 sp2 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:10.1:sp3:*:*:*:*:*:* Versions 10.1 sp3 Vulnerable ·Avaya
cpe:2.3:a:avaya:ip_office:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Avaya

Remediation

Fix · CNA IP Office (Avaya) Fixed in 11.0 SP1, 10.1 SP4

Timeline

2026-10-02 Threatist record created from CVE-2018-15614
2026-10-03 Alias added: GHSA-28rm-36w9-mxrj
2026-11-07 EPSS moved to the 50th–90th percentile

References

Advisory 1

https://downloads.avaya.com/css/P8/documents/101054317

TI-2017-08352 Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote… CVSS 3.0CRITICAL 9.6
TI-2024-03903 Avaya IP Office Web Control RCE Vulnerability CVSS 3.1CRITICAL 10.0
TI-2024-03904 Avaya IP Office One-X Portal File Upload Vulnerability CVSS 3.1CRITICAL 9.9
TI-2018-11135 Improper access controls in IP Office one-X Portal CVSS 3.0HIGH 8.8
TI-2016-04582 NULL pointer dereference in Mozilla Network Security Services CVSS 3.1HIGH 7.5
TI-2019-04935 Unauthenticated Information Disclosure Vulnerability in IP Office CVSS 3.1HIGH 7.5

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences