MC
Product
MiVoice Connect
On CISA KEVExploited in the wildRansomware-linked
22
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 4Medium 13Low 0
Watch
Add MiVoice Connect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41223 RansomwareIn wildKEV | 6.8 | Nov 22 | Mitel MiVoice Connect Code Injection Vulnerability Affected: through 22.22.6100.0 |
| CVE-2022-40765 RansomwareIn wildKEV | 6.8 | Nov 22 | Mitel MiVoice Connect Command Injection Vulnerability Affected: through 22.22.6100.0 |
| CVE-2018-9102 | 6.5 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2023-25598 | 6.1 | May 24 | A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to… Affected: through 22.24.1500.0 |
| CVE-2020-12679 | 6.1 | May 7 | A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to… Affected: before 21.90.9743.0 |
| CVE-2018-9104 | 6.1 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2018-9103 | 6.1 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2018-9101 | 6.1 | Apr 25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and… Affected: through 21.84.5535.0 |
| CVE-2023-39288 | 5.5 | Aug 25 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal… Affected: through 9.6.2304.102 |
| CVE-2023-39287 | 5.5 | Aug 25 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal… Affected: through 22.24.5800.0 |
| CVE-2023-39291 | 4.9 | Aug 25 | A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an… Affected: through 9.6.2304.102 |
| CVE-2023-39290 | 4.9 | Aug 25 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct… Affected: through 22.24.5800.0 |
| CVE-2023-39285 | 4.3 | Sep 14 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request… Affected: before 22.24.7100.0 |
Showing 13