İçeriğe atla
Noroxi

mitel kayıtları

mitel üreticisine ait 142 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
8 · %5,6
Silahlaştırılmış
8 · %5,6
Pre-auth RCE
41
Düzeltme kaydı olan
%1,4
Yayından KEV’e ortanca
85 gün

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

142 kayıt
  • CVE-2024-41713
    95Hemen

    A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenti

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %98

    mitel · micollab21 Eki 2024

  • CVE-2022-26143
    95Hemen

    The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %87

    mitel · micollab10 Mar 2022

  • CVE-2014-0160
    90Hemen

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    openssl · openssl7 Nis 2014

  • CVE-2022-29499
    85Hemen

    The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %55

    mitel · mivoice connect25 Nis 2022

  • CVE-2024-41710
    70Bu hafta

    A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %42

    mitel · 6970 firmware12 Ağu 2024

  • CVE-2022-41223
    60Bu hafta

    The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injec

    OrtaCVSS 6,8KEVSilahlaştırılmışEPSS %11

    mitel · mivoice connect21 Kas 2022

  • CVE-2022-40765
    60Bu hafta

    A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker wit

    OrtaCVSS 6,8KEVSilahlaştırılmışEPSS %11

    mitel · mivoice connect21 Kas 2022

  • CVE-2024-35286
    59Planlayın

    A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection

    KritikCVSS 9,8Kavram kanıtıEPSS %66

    mitel · micollab21 Eki 2024

  • CVE-2024-55550
    51Planlayın

    Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insu

    DüşükCVSS 2,7KEVSilahlaştırılmışEPSS %38

    mitel · micollab10 Ara 2024

  • CVE-2018-5782
    45Planlayın

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    mitel · connect onsite14 Mar 2018

  • CVE-2018-3639
    40Planlayın

    Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior mem

    OrtaCVSS 5,5Kavram kanıtıEPSS %61

    intel · atom c22 May 2018

  • CVE-2018-15497
    40Planlayın

    The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality.

    KritikCVSS 9,8İstismar yokEPSS %5

    mitel · mivoice 5330e firmware23 Eki 2018

  • CVE-2018-19275
    40Planlayın

    The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote

    KritikCVSS 9,8İstismar yokEPSS %5

    mitel · cmg suite2 Nis 2019

  • CVE-2019-12165
    40Planlayın

    MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2 (

    KritikCVSS 9,8İstismar yokEPSS %3

    mitel · micollab29 May 2019

  • CVE-2020-10211
    40Planlayın

    A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attack

    KritikCVSS 9,8İstismar yokEPSS %3

    mitel · mivoice connect17 Nis 2020

  • CVE-2018-5779
    40Planlayın

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and

    KritikCVSS 9,8İstismar yokEPSS %3

    mitel · connect onsite14 Mar 2018

  • CVE-2021-26714
    40Planlayın

    The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access restricted files and fold

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    mitel · micontact center enterprise29 Mar 2021

  • CVE-2018-18286
    40Planlayın

    SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack d

    KritikCVSS 9,8İstismar yokEPSS %2

    mitel · cmg suite25 Nis 2019

  • CVE-2018-18285
    40Planlayın

    SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack d

    KritikCVSS 9,8İstismar yokEPSS %2

    mitel · cmg suite25 Nis 2019

  • CVE-2024-35314
    40Planlayın

    A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.2

    KritikCVSS 9,8İstismar yokEPSS %2

    mitel · micollab21 Eki 2024

  • CVE-2018-5781
    40Planlayın

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and

    KritikCVSS 9,8İstismar yokEPSS %2

    mitel · connect onsite14 Mar 2018

  • CVE-2018-5780
    40Planlayın

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and

    KritikCVSS 9,8İstismar yokEPSS %2

    mitel · connect onsite14 Mar 2018

  • CVE-2019-19608
    40Planlayın

    A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attac

    KritikCVSS 9,8İstismar yokEPSS %2

    mitel · micollab audio\, web \& video conferencing2 Mar 2020

  • CVE-2019-19607
    40Planlayın

    A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack d

    KritikCVSS 9,8İstismar yokEPSS %2

    mitel · micollab audio\, web \& video conferencing2 Mar 2020

  • CVE-2020-24594
    39İzleyin

    Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient inpu

    KritikCVSS 9,6İstismar yokEPSS %2

    mitel · micloud management portal25 Eyl 2020