CVE-2025-23093

The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and V11 through R0.22.1 could allow an authenticated attacker to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploit could allow an...

CVE-2025-23093

The Platform component of Mitel OpenScape 4000 (versions V10 R1.54.1 and earlier, and V11 through R0.22.1) and Mitel OpenScape 4000 Manager (versions V10 R1.54.1 and earlier, and V11 through R0.22.1) is vulnerable to a privilege escalation attack. The root cause is the execution of a resource wit...

CVE-2025-23094

The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager is vulnerable to a command injection attack. This is caused by insufficient parameter sanitization , which could allow an unauthenticated attacker to execute arbitrary commands within the same privilege level as the web acc...

CVE-2022-36444

An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker with network access to the admi...

PT-2025-4822 · Mitel · Mitel Openscape 4000 Manager +1

Name of the Vulnerable Software and Affected Versions: Mitel OpenScape 4000 versions V10 R1.54.1 and earlier Mitel OpenScape 4000 Manager versions V10 R1.54.1 and earlier Mitel OpenScape 4000 versions V11 through R0.22.1 Mitel OpenScape 4000 Manager versions V11 through R0.22.1 Description: The...

CVE-2023-40264

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...

CVE-2023-40263

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp...

CVE-2023-40262

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...

CVE-2023-40264

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...

CVE-2023-40262

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...

Path traversal

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...

Command injection

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp...

Cross site scripting

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...

CVE-2023-40265

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload...

CVE-2023-40266

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path traversal...

CVE-2023-40265

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload...

CVE-2023-40266

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path traversal...

Path traversal

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path traversal...

CVE-2023-40262

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...

CVE-2023-40266

The CVE-2023-40266 vulnerability affects Atos Unify OpenScape Xpressions WebAssistant, with versions prior to V7R1 FR5 HF42 P911 susceptible to path traversal. The issue allows an attacker to access files outside the intended directory, as indicated in multiple sources. Impact is rated very high ...