Read the docs

Mitel

Records142All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical36CVSS 9.0–10.0
CVSS high41CVSS 7.0–8.9

Exploited now

Mitel records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in St14.2 · all components

Priority MEDIUM 60

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specia…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1872 Published 2018-03-14 No fix listed CWE-94
Priority MEDIUM 47

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a malicious script into…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02718 Published 2018-03-14 No fix listed CWE-94
Priority MEDIUM 46

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specia…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0173 Published 2018-03-14 No fix listed CWE-94
Priority MEDIUM 46

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specia…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0173 Published 2018-03-14 No fix listed CWE-94
Open these records in search →