MC
Product
MiVoice Connect
On CISA KEVExploited in the wildRansomware-linked
22
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 4Medium 13Low 0
Watch
Add MiVoice Connect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29499 RansomwareIn wildKEV | 9.8 | Apr 26 | Mitel MiVoice Connect Data Validation Vulnerability Affected: through 22.20.2300.0 |
| CVE-2022-41223 RansomwareIn wildKEV | 6.8 | Nov 22 | Mitel MiVoice Connect Code Injection Vulnerability Affected: through 22.22.6100.0 |
| CVE-2022-40765 RansomwareIn wildKEV | 6.8 | Nov 22 | Mitel MiVoice Connect Command Injection Vulnerability Affected: through 22.22.6100.0 |
| CVE-2023-32748 | 9.8 | Aug 14 | The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary… Affected: through 22.24.1500.0 |
| CVE-2023-31458 | 9.8 | May 24 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network… Affected: through 22.24.1500.0 |
| CVE-2023-31457 | 9.8 | May 24 | A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal… Affected: through 22.24.1500.0 |
| CVE-2020-10211 | 9.8 | Apr 17 | A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to… Affected: before 22.11.4900.0 |
| CVE-2023-31459 | 8.8 | May 24 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network… Affected: through 9.6.2208.101 |
| CVE-2023-39289 | 7.5 | Aug 25 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration… Affected: through 9.6.2208.101 |
| CVE-2023-25599 | 7.4 | May 24 | A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site… Affected: through 22.24.1500.0 |
| CVE-2023-31460 | 7.2 | May 24 | A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to… Affected: through 9.6.2208.101 |
| CVE-2018-9102 | 6.5 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2023-25598 | 6.1 | May 24 | A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to… Affected: through 22.24.1500.0 |
| CVE-2020-12679 | 6.1 | May 7 | A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to… Affected: before 21.90.9743.0 |
| CVE-2018-9104 | 6.1 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2018-9103 | 6.1 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2018-9101 | 6.1 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2023-39288 | 5.5 | Aug 25 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal… Affected: through 9.6.2304.102 |
| CVE-2023-39287 | 5.5 | Aug 25 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal… Affected: through 22.24.5800.0 |
| CVE-2023-39291 | 4.9 | Aug 25 | A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an… Affected: through 9.6.2304.102 |
| CVE-2023-39290 | 4.9 | Aug 25 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct… Affected: through 22.24.5800.0 |
| CVE-2023-39285 | 4.3 | Sep 14 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request… Affected: before 22.24.7100.0 |
Showing 22