Количество 3
Количество 3
CVE-2023-25599
A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
GHSA-j6w4-j677-qv94
A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
BDU:2023-02888
Уязвимость системы бизнес-телефонии MiVoice Connect VoIP-устройств Mitel, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю получить доступ к информации о конференции пользователя
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-25599 A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an attacker to execute arbitrary scripts. | CVSS3: 7.4 | 0% Низкий | больше 2 лет назад |
| GHSA-j6w4-j677-qv94 A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an attacker to execute arbitrary scripts. | CVSS3: 7.4 | 0% Низкий | больше 2 лет назад |
 | BDU:2023-02888 Уязвимость системы бизнес-телефонии MiVoice Connect VoIP-устройств Mitel, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю получить доступ к информации о конференции пользователя | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу