CVE-2020-24595

Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control...

CVE-2020-24594

CVE-2020-24594 affects Mitel MiCloud Management Portal before 6.1 SP5. The issue is insufficient input validation enabling unauthenticated XSS, which could let an attacker execute arbitrary scripts and gain access to a user session. Remediation details are not explicitly provided in the documents...

CVE-2020-24592

Mitel MiCloud Management Portal prior to version 6.1 SP5 is affected by CVE-2020-24592 due to insufficient output sanitization, which could allow an attacker to view system information via a crafted request. The Red Hat and NVD references confirm the same impact. Remediation: upgrade to 6.1 SP5 o...