Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MitelMivoice Connect*

24 matches found

CVE
CVE•added 2022/04/26 2:15 a.m.•975 views

CVE-2022-29499

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

10CVSS9.7AI score0.89829EPSS
In wild
CVE
CVE•added 2022/11/22 1:15 a.m.•563 views

CVE-2022-40765

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.

6.8CVSS6.6AI score0.02949EPSS
In wild
CVE
CVE•added 2022/11/22 1:15 a.m.•556 views

CVE-2022-41223

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.

6.8CVSS6.6AI score0.03318EPSS
In wild
CVE
CVE•added 2023/05/24 8:15 p.m.•63 views

CVE-2023-25598

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the home.php page. A successful e...

6.1CVSS6.1AI score0.00317EPSS
CVE
CVE•added 2023/05/24 9:15 p.m.•54 views

CVE-2023-31458

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A...

9.8CVSS9.5AI score0.00273EPSS
CVE
CVE•added 2023/05/24 8:15 p.m.•53 views

CVE-2023-31459

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because the initial installation does not enforce a password chang...

8.8CVSS8.8AI score0.00088EPSS
CVE
CVE•added 2023/08/25 10:15 p.m.•53 views

CVE-2023-39289

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.

7.5CVSS7.5AI score0.00249EPSS
CVE
CVE•added 2023/05/24 8:15 p.m.•50 views

CVE-2023-31457

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.

9.8CVSS9.5AI score0.00519EPSS
CVE
CVE•added 2018/04/25 8:29 p.m.•48 views

CVE-2018-9101

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficie...

6.1CVSS6.1AI score0.00325EPSS
CVE
CVE•added 2023/05/24 9:15 p.m.•47 views

CVE-2023-25599

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an ...

7.4CVSS7AI score0.00294EPSS
CVE
CVE•added 2023/05/24 8:15 p.m.•46 views

CVE-2023-31460

A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters.

7.2CVSS7AI score0.02277EPSS
CVE
CVE•added 2018/04/25 8:29 p.m.•39 views

CVE-2018-9102

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation fo...

6.5CVSS6.7AI score0.00275EPSS
CVE
CVE•added 2018/04/25 8:29 p.m.•39 views

CVE-2018-9103

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficie...

6.1CVSS6.1AI score0.00325EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•39 views

CVE-2020-12456

A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform d...

8.8CVSS8.9AI score0.01336EPSS
CVE
CVE•added 2023/08/25 10:15 p.m.•39 views

CVE-2023-39291

A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system info...

4.9CVSS4.8AI score0.00123EPSS
CVE
CVE•added 2018/04/25 8:29 p.m.•38 views

CVE-2018-9104

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficie...

6.1CVSS6.1AI score0.00325EPSS
CVE
CVE•added 2020/04/17 1:15 p.m.•38 views

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive info...

9.8CVSS9.9AI score0.01677EPSS
CVE
CVE•added 2023/08/25 10:15 p.m.•37 views

CVE-2023-39287

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit ...

5.5CVSS5.5AI score0.00145EPSS
CVE
CVE•added 2020/04/17 1:15 p.m.•36 views

CVE-2020-10377

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials.

9.8CVSS9.4AI score0.00109EPSS
CVE
CVE•added 2020/05/07 5:15 p.m.•34 views

CVE-2020-12679

A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATH_INFO to home.php.

6.1CVSS5.9AI score0.00222EPSS
CVE
CVE•added 2023/09/14 7:16 p.m.•34 views

CVE-2023-39285

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modi...

4.3CVSS4.7AI score0.0011EPSS
CVE
CVE•added 2023/08/25 10:15 p.m.•32 views

CVE-2023-39288

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit ...

5.5CVSS5.5AI score0.00145EPSS
CVE
CVE•added 2023/08/25 10:15 p.m.•28 views

CVE-2023-39290

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view syst...

4.9CVSS4.8AI score0.00123EPSS
CVE
CVE•added 2023/08/14 6:15 p.m.•26 views

CVE-2023-32748

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.

9.8CVSS9.6AI score0.00351EPSS