Количество 3
Количество 3
CVE-2025-23094
The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the same privilege level as the web access process.
GHSA-rfr5-8xxx-p68v
The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the same privilege level as the web access process.
BDU:2026-01995
Уязвимость веб-службы гибридной коммуникационной платформы Mitel OpenScape 4000 и платформы централизованного управления сетью Mitel OpenScape 4000 Manager, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-23094 The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the same privilege level as the web access process. | CVSS3: 7.3 | 1% Низкий | больше 1 года назад |
| GHSA-rfr5-8xxx-p68v The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the same privilege level as the web access process. | CVSS3: 7.3 | 1% Низкий | больше 1 года назад |
 | BDU:2026-01995 Уязвимость веб-службы гибридной коммуникационной платформы Mitel OpenScape 4000 и платформы централизованного управления сетью Mitel OpenScape 4000 Manager, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.3 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу