CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

235 matches found

RedhatCVE•added 2026/01/09 12:41 p.m.•5 views

CVE-2023-25599

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the testpresenter.php page. A successful exploit could allow an...

7.4CVSS6.3AI score0.00624EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 12:41 p.m.•6 views

CVE-2023-25598

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the home.php page. A successful...

6.1CVSS6.3AI score0.0041EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 12:34 p.m.•5 views

CVE-2023-31459

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because the initial installation does not enforce a password...

8.8CVSS7.4AI score0.00387EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 12:33 p.m.•8 views

CVE-2023-31460

A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters...

7.2CVSS7.2AI score0.01714EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:53 a.m.•7 views

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

9.8CVSS8.5AI score0.02971EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:52 a.m.•11 views

CVE-2020-10377

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...

9.8CVSS7.2AI score0.00542EPSS

Exploits0References1