Mitel: >> Mivoice Connect >> 21.90.4127.0 Security Vulnerabilities
CVE-2022-29499
The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.
Known exploited
CVSS Score
9.8
EPSS Score
0.909
Published
2022-04-26
A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATH_INFO to home.php.
CVSS Score
6.1
EPSS Score
0.002
Published
2020-05-07
A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.
CVSS Score
9.8
EPSS Score
0.017
Published
2020-04-17
Page 2