Product by Mitel
Mitel MiVoice Connect
23 known vulnerabilities in Mitel MiVoice Connect (Mitel), 3 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
3
Actively exploited (KEV)
3
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-29499 | Mitel MiVoice Connect Data Validation Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2022-41223 | Mitel MiVoice Connect Code Injection Vulnerability In CISA KEVRansomware | 6.8 | |
| Critical | CVE-2022-40765 | Mitel MiVoice Connect Command Injection Vulnerability In CISA KEVRansomware | 6.8 | |
| Critical | CVE-2020-10211 | Mitel MiVoice Connect: Remote Code Execution | 9.8 | |
| Medium | CVE-2018-3639 | Intel Multiple: security vulnerability | 5.5 | |
| High | CVE-2023-31460 | Mitel MiVoice Connect: Command Injection | 7.2 | |
| Critical | CVE-2023-31457 | Mitel MiVoice Connect: Improper Access Control | 9.8 | |
| Critical | CVE-2023-31458 | Mitel MiVoice Connect: security vulnerability | 9.8 | |
| Critical | CVE-2023-32748 | Mitel MiVoice Connect: Improper Access Control | 9.8 | |
| Medium | CVE-2018-9102 | Mitel MiVoice Connect: SQL Injection | 6.5 | |
| Medium | CVE-2018-9104 | Mitel MiVoice Connect: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2018-9101 | Mitel MiVoice Connect: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2018-9103 | Mitel MiVoice Connect: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2023-25599 | Mitel MiVoice Connect: Cross-Site Scripting (XSS) | 7.4 | |
| High | CVE-2023-39289 | Mitel MiVoice Connect: security vulnerability | 7.5 | |
| High | CVE-2023-31459 | Mitel MiVoice Connect: security vulnerability | 8.8 | |
| Medium | CVE-2020-12679 | Mitel MiVoice Connect: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2023-39287 | Mitel MiVoice Connect: Argument Injection | 5.5 | |
| Medium | CVE-2023-39288 | Mitel MiVoice Connect: Argument Injection | 5.5 | |
| Medium | CVE-2023-39291 | Mitel MiVoice Connect: Information Disclosure | 4.9 | |
| Medium | CVE-2023-39290 | Mitel MiVoice Connect: Information Disclosure | 4.9 | |
| Medium | CVE-2023-25598 | Mitel MiVoice Connect: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2023-39285 | Mitel MiVoice Connect: Cross-Site Request Forgery (CSRF) | 4.3 |