Connect Onsite vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CO

Product

Connect Onsite

by Mitel · last CVE Mar 6, 2019

7

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 4High 0Medium 3Low 0

Severity

All severities7 Critical4 High0 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Connect Onsite to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-5782	9.8	19%	Mar 14	A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated… Affected: through r1711-prem
CVE-2018-5781	9.8	2%	Mar 14	A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated… Affected: through r1711-prem
CVE-2018-5780	9.8	2%	Mar 14	A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated… Affected: through r1711-prem
CVE-2018-5779	9.8	3%	Mar 14	A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated… Affected: through r1711-prem
CVE-2019-9591	6.1	5%	Mar 6	A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl… Affected: before 19.49.1500.0
CVE-2019-9592	6.1	5%	Mar 6	A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter Affected: 19.45.1602.0
CVE-2019-9593	6.1	4%	Mar 6	A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter Affected: 18.82.2000.0