Количество 3
Количество 3
CVE-2023-25598
A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the home.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
GHSA-m4r2-qrx4-m73j
A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the home.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
BDU:2023-02887
Уязвимость системы бизнес-телефонии MiVoice Connect VoIP-устройств Mitel, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю получить доступ к информации о конференции пользователя
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-25598 A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the home.php page. A successful exploit could allow an attacker to execute arbitrary scripts. | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад |
| GHSA-m4r2-qrx4-m73j A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the home.php page. A successful exploit could allow an attacker to execute arbitrary scripts. | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад |
 | BDU:2023-02887 Уязвимость системы бизнес-телефонии MiVoice Connect VoIP-устройств Mitel, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю получить доступ к информации о конференции пользователя | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу