CRITICAL✓ PATCH🇬🇧 English

CVE-2020-10211

CVSS 9.8v3.1pub. 2020-04-17upd. 2025-11-03

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mitel Mivoice Connect

    APP
    Mitel
    < 22.11.4900.0
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2022-29499CRITICAL9.8⚠ KEVten sam produkt

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because...

CVE-2023-32748CRITICAL9.8ten sam produkt

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthe...

CVE-2023-31458CRITICAL9.8ten sam produkt

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and ea...

CVE-2023-31457CRITICAL9.8ten sam produkt

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0)...

CVE-2023-39289HIGH7.5ten sam produkt

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could a...