Browse CVEs

HIGH 8.8 CVE-2024-37570 On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (se… 6869i Sip Firmware No fix yet Fix from $1,9502024-06-09 MEDIUM 6.1 CVE-2020-28351EPSS 16% The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting… Shoretel Firmware No fix yet Fix from $1,6002020-11-09 MEDIUM 5.9 CVE-2019-19891 An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A succes… Sip Dect Firmware Mitigation only Fix from $1,6002020-01-13 MEDIUM 6.1 CVE-2019-9592EPSS 5% A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script o… Connect Onsite No fix yet Fix from $1,6002019-03-06 MEDIUM 6.1 CVE-2019-9593 A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script o… Connect Onsite No fix yet Fix from $1,6002019-03-06 MEDIUM 6.1 CVE-2018-16226 A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attac… Mivoice Office 400 Mitigation only Fix from $1,6002018-10-23 HIGH 7.5 CVE-2016-6562 On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connecti… Shortel Mobility Client Mitigation only Fix from $1,9502018-07-13 CRITICAL 9.8 CVE-2018-5779 A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, … Connect Onsite Mitigation only Fix from $2,3002018-03-14 CRITICAL 9.8 CVE-2018-5780 A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, … Connect Onsite Mitigation only Fix from $2,3002018-03-14 CRITICAL 9.8 CVE-2018-5781 A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, … Connect Onsite Mitigation only Fix from $2,3002018-03-14 CRITICAL 9.8 CVE-2018-5782EPSS 19% A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, … Connect Onsite No fix yet Fix from $2,3002018-03-14 HIGH 8.8 CVE-2017-16251 A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious scr… St14.2 Mitigation only Fix from $1,9502018-03-13 MEDIUM 5.3 CVE-2017-16250 A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could… St14.2 Mitigation only Fix from $1,6002018-03-13 HIGH 7.8 CVE-2008-6797 The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obt… Mitel Nupoint Messenger Mitigation only Fix from $1,9502009-05-07 MEDIUM 5.0 CVE-2004-0945 The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a den… Mitel 3300 Integrated Communication Platform Mitigation only Fix from $1,6002005-02-28