MitelMivoice Business
2 matches found
CVE-2018-3639
CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...
5.5CVSS5.9AI score0.60631EPSS
SaveIn wild
CVE-2022-31784
CVE-2022-31784 affects Mitel MiVoice Business (up to 9.3 PR1) and MiVoice Business Express (up to 8.0 SP3 PR3). The vulnerability stems from insufficient validation of URL parameters in the management interface, enabling an unauthenticated attacker with network access to perform a buffer overflow...
9.8CVSS9.8AI score0.01557EPSS
Save