Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MitelConnect Onsite

7 matches found

CVE
CVE•added 2019/03/06 4:29 p.m.•76 views

CVE-2019-9591

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.

6.1CVSS6AI score0.05187EPSS
CVE
CVE•added 2019/03/06 4:29 p.m.•62 views

CVE-2019-9593

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

6.1CVSS6AI score0.03888EPSS
CVE
CVE•added 2018/03/14 4:29 p.m.•59 views

CVE-2018-5782

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow a...

10CVSS9.7AI score0.33394EPSS
CVE
CVE•added 2019/03/06 4:29 p.m.•48 views

CVE-2019-9592

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

6.1CVSS6AI score0.05187EPSS
CVE
CVE•added 2018/03/14 4:29 p.m.•33 views

CVE-2018-5780

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vnewmeeting.php page. Successful exploit could allo...

10CVSS9.6AI score0.01177EPSS
CVE
CVE•added 2018/03/14 4:29 p.m.•31 views

CVE-2018-5781

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vendrecording.php page. Successful exploit could al...

10CVSS9.6AI score0.01177EPSS
CVE
CVE•added 2018/03/14 4:29 p.m.•28 views

CVE-2018-5779

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a malicious script into a newly generated PHP file and then execute the generated file using specially...

10CVSS9.6AI score0.02235EPSS