Mitel

Mivoice Office 400

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-39293

  • EPSS 0.79%
  • Veröffentlicht 14.08.2023 19:15:13
  • Zuletzt bearbeitet 21.11.2024 08:15:05

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.

9.8

CVE-2023-39292

  • EPSS 0.27%
  • Veröffentlicht 14.08.2023 19:15:12
  • Zuletzt bearbeitet 21.11.2024 08:15:05

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations.

6.1

CVE-2018-16226

  • EPSS 0.23%
  • Veröffentlicht 23.10.2018 21:30:52
  • Zuletzt bearbeitet 21.11.2024 03:52:19

A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack, due to insufficient validation for the ...