Vulnerability index

Browse CVEs

15 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

6869i Sip Firmware HIGH 8.8
CVE-2024-37570

On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (se…

No fix yet
Fix from $1,950 2024-06-09
Shoretel Firmware MEDIUM 6.1
CVE-2020-28351EPSS 16%

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting…

No fix yet
Fix from $1,600 2020-11-09
Sip Dect Firmware MEDIUM 5.9
CVE-2019-19891

An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A succes…

Mitigation only
Fix from $1,600 2020-01-13
Connect Onsite MEDIUM 6.1
CVE-2019-9592EPSS 5%

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script o…

No fix yet
Fix from $1,600 2019-03-06
Connect Onsite MEDIUM 6.1
CVE-2019-9593

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script o…

No fix yet
Fix from $1,600 2019-03-06
Mivoice Office 400 MEDIUM 6.1
CVE-2018-16226

A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attac…

Mitigation only
Fix from $1,600 2018-10-23
Shortel Mobility Client HIGH 7.5
CVE-2016-6562

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connecti…

Mitigation only
Fix from $1,950 2018-07-13
Connect Onsite CRITICAL 9.8
CVE-2018-5779

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, …

Mitigation only
Fix from $2,300 2018-03-14
Connect Onsite CRITICAL 9.8
CVE-2018-5780

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, …

Mitigation only
Fix from $2,300 2018-03-14
Connect Onsite CRITICAL 9.8
CVE-2018-5781

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, …

Mitigation only
Fix from $2,300 2018-03-14
Connect Onsite CRITICAL 9.8
CVE-2018-5782EPSS 19%

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, …

No fix yet
Fix from $2,300 2018-03-14
St14.2 HIGH 8.8
CVE-2017-16251

A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious scr…

Mitigation only
Fix from $1,950 2018-03-13
St14.2 MEDIUM 5.3
CVE-2017-16250

A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could…

Mitigation only
Fix from $1,600 2018-03-13
Mitel Nupoint Messenger HIGH 7.8
CVE-2008-6797

The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obt…

Mitigation only
Fix from $1,950 2009-05-07
Mitel 3300 Integrated Communication Platform MEDIUM 5.0
CVE-2004-0945

The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a den…

Mitigation only
Fix from $1,600 2005-02-28