CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2020-10211

CVSS 9.8v3.1pub. 2020-04-17upd. 2025-11-03

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mitel Mivoice Connect

    APP
    Mitel
    < 22.11.4900.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2022-29499CRITICAL9.8⚠ KEVten sam produkt

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because...

CVE-2023-32748CRITICAL9.8ten sam produkt

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthe...

CVE-2023-31458CRITICAL9.8ten sam produkt

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and ea...

CVE-2023-31457CRITICAL9.8ten sam produkt

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0)...

CVE-2023-39289HIGH7.5ten sam produkt

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could a...