Mitel

Records142All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical36CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Mitel records in CISA KEV

TI-2024-27770 Mitel SIP Phones Argument Injection Vulnerability CRITICAL 91KEV 2025-02-12 TI-2024-27773 Mitel MiCollab Path Traversal Vulnerability CRITICAL 98KEV 2025-01-07 TI-2024-36877 Mitel MiCollab Path Traversal Vulnerability HIGH 78KEV 2025-01-07 TI-2022-19391 Mitel MiVoice Connect Command Injection Vulnerability CRITICAL 89KEV 2023-02-21 TI-2022-19733 Mitel MiVoice Connect Code Injection Vulnerability CRITICAL 89KEV 2023-02-21 TI-2022-11960 Mitel MiVoice Connect Data Validation Vulnerability CRITICAL 100KEV 2022-06-27

Components

Products in the NVD configurations · select one to filter the records

Micollab 48 records CRITICAL Mivoice Connect 23 records CRITICAL Micontact Center Business 11 records MEDIUM Connect Onsite 7 records MEDIUM Micollab Audio, Web & Video Conferencing 6 records MEDIUM St14.2 6 records MEDIUM Micloud Management Portal 5 records MEDIUM 6869i Sip Firmware 4 records CRITICAL

Records

7 records in Connect Onsite · all components

TI-2018-04182 CVE-2018-5782 · GHSA-f6hm-9chg-x5vg

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions…

MEDIUM 60

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specia…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1872 Published 2018-03-14 No fix listed CWE-94

TI-2018-04179 CVE-2018-5779 · GHSA-2ggv-vfg5-vf2c

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions…

MEDIUM 47

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02718 Published 2018-03-14 No fix listed CWE-94

TI-2018-04181 CVE-2018-5781 · GHSA-p4hf-6x6h-hfmg

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions…

MEDIUM 46

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0173 Published 2018-03-14 No fix listed CWE-94

TI-2018-04180 CVE-2018-5780 · GHSA-q67w-c582-qq6h

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions…

MEDIUM 46

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0173 Published 2018-03-14 No fix listed CWE-94

TI-2019-07010 CVE-2019-9592 · GHSA-6vv7-cpw5-3fx7

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE…

LOW 35

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05304 Published 2019-03-06 No fix listed CWE-79

TI-2019-07009 CVE-2019-9591 · GHSA-qpw8-c5vm-gx2f

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before…

LOW 35

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05328 Published 2019-03-06 No fix listed CWE-79

TI-2019-07011 CVE-2019-9593 · GHSA-q2fg-xxpx-vrmm

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE…

LOW 34

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0442 Published 2019-03-06 No fix listed CWE-79

Open these records in search →

Critical	36
High	41
Medium	61
Low	4
No CVSS	0