Mitel: >> Mivoice Connect >> 22.10.7600.0 Security Vulnerabilities
CVE-2022-29499
The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.
Known exploited
CVSS Score
9.8
EPSS Score
0.909
Published
2022-04-26
A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.
CVSS Score
9.8
EPSS Score
0.017
Published
2020-04-17
Page 2