The vulnerability of the web service of the hybrid communication platform Mitel OpenScape 4000 and the network management platform Mitel OpenScape 4000 Manager lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary codes.

The vulnerability of the web-based communication platform Mitel OpenScape 4000 and the centralized network management platform Mitel OpenScape 4000 Manager is related to the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the web-based communication platform Mitel OpenScape 4000 and its centralized network management platform, Mitel OpenScape 4000 Manager, is related to errors in privilege management. This vulnerability allows an attacker to elevate their privileges and execute arbitrary code.

The vulnerability of the Mitel OpenScape 4000 hybrid communication platform’s web service and the Mitel OpenScape 4000 Manager network management platform is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges and execute...

CVE-2025-23093

The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and V11 through R0.22.1 could allow an authenticated attacker to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploit could allow an...

EUVD-2025-3120

Malicious code in bioql PyPI...

EUVD-2025-28139

Malicious code in bioql PyPI...

CVE-2025-23092

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a path traversal attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to upload arbitrary files and execute...

CVE-2025-48026

A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to read files from the underlying OS and...

CVE-2025-23092: Improper Limitation of a Pathname to a Restricted Directory

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a path traversal attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to upload arbitrary files and execute...

CVE-2025-48026: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to read files from the underlying OS and...

Mitel OpenScape Accounting Management 安全漏洞

Mitel OpenScape Accounting Management is an application for managing and tracking communication costs from Mitel Canada. A security vulnerability exists in Mitel OpenScape Accounting Management V5 R1.1.0 and earlier versions, which stems from insufficient user input cleanup leading to a path...

CVE-2025-23092

Mitel OpenScape Accounting Management version V5 R1.1.0 and earlier are vulnerable to a path traversal attack. The root cause is insufficient sanitization of user input, which could allow an authenticated attacker with administrative privileges to bypass directory restrictions. Successful exploit...

CVE-2025-48026

The WebApl component in Mitel OpenScape Xpressions versions through V7R1 FR5 HF43 P913 is vulnerable to a path traversal attack. This flaw is caused by insufficient input validation , which could allow an unauthenticated attacker to read files from the underlying operating system and access sensi...

CVE-2025-23092

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a path traversal attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to upload arbitrary files and execute...

PT-2025-26636 · Mitel · Mitel Openscape Xpressions

Name of the Vulnerable Software and Affected Versions: Mitel OpenScape Xpressions versions through V7R1 FR5 HF43 P913 Description: A vulnerability in the WebApl component could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful...

CVE-2025-23092

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a path traversal attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to upload arbitrary files and execute...

CVE-2025-48026

A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to read files from the underlying OS and...

CVE-2025-48026

A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to read files from the underlying OS and...

PT-2025-13391 · Mitel · Mitel Micontact Center Business

Name of the Vulnerable Software and Affected Versions: Mitel OpenScape Accounting Management through V5 R1.1.0 Description: The issue is related to a path traversal attack due to insufficient sanitization of user input, which could allow an authenticated attacker with administrative privileges to...

CVE-2025-23094

The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A...

CVE-2025-23094

The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A...