Lucene search

K

6 matches found

CVE
CVE
added 2022/11/22 1:15 a.m.564 views

CVE-2022-40765

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.

6.8CVSS6.6AI score0.02949EPSS
In wild
CVE
CVE
added 2022/11/22 1:15 a.m.556 views

CVE-2022-41223

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.

6.8CVSS6.6AI score0.03318EPSS
In wild
CVE
CVE
added 2023/05/24 9:15 p.m.47 views

CVE-2023-25599

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an ...

7.4CVSS7AI score0.00294EPSS
CVE
CVE
added 2020/08/26 7:15 p.m.39 views

CVE-2020-12456

A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform d...

8.8CVSS8.9AI score0.01336EPSS
CVE
CVE
added 2020/05/07 5:15 p.m.34 views

CVE-2020-12679

A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATH_INFO to home.php.

6.1CVSS5.9AI score0.00222EPSS
CVE
CVE
added 2023/09/14 7:16 p.m.34 views

CVE-2023-39285

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modi...

4.3CVSS4.7AI score0.0011EPSS