CVE-2018-3639

CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...

CVE-2020-24594

CVE-2020-24594 affects Mitel MiCloud Management Portal before 6.1 SP5. The issue is insufficient input validation enabling unauthenticated XSS, which could let an attacker execute arbitrary scripts and gain access to a user session. Remediation details are not explicitly provided in the documents...

CVE-2020-24593

The CVE-2020-24593 entry documents a SQL Injection vulnerability in Mitel MiCloud Management Portal before version 6.1 SP5, caused by improper input validation. The issue allows a remote attacker to access user credentials by exploiting unsafely handled inputs in the web application. Affected sof...

CVE-2020-24595

Affected product: Mitel MiCloud Management Portal. The vulnerability (CVE-2020-24595) stems from insufficient access control in versions prior to 6.1 SP5, enabling an attacker to retrieve sensitive information by sending a crafted request. Impact is information disclosure; no exploitation details...

CVE-2020-24592

Mitel MiCloud Management Portal prior to version 6.1 SP5 is affected by CVE-2020-24592 due to insufficient output sanitization, which could allow an attacker to view system information via a crafted request. The Red Hat and NVD references confirm the same impact. Remediation: upgrade to 6.1 SP5 o...