CVE-2020-9379

EPSS 0.34%
Published 25.02.2020 19:15:11
Last modified 21.11.2024 05:40:31
Source cve@mitre.org
Teams watchlist Login
Open Login

The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conversations.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Mitel ≫ Micontact Center Business Version >= 8.0 <= 9.0.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.34%	0.537

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

https://www.mitel.com/support/security-advisories

Vendor Advisory

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0003

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-9379

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-9379

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-9379

EUVD