Mitel Mivoice Connect — known CVE vulnerabilities

Every CVE whose affected-product data names Mitel Mivoice Connect, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (23)

• CVE-2022-29499 — CVSS 9.8 (critical) — actively exploited: The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data…
• CVE-2023-32748 — CVSS 9.8 (critical): The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with…
• CVE-2023-31458 — CVSS 9.8 (critical): A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an…
• CVE-2023-31457 — CVSS 9.8 (critical): A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an…
• CVE-2020-10211 — CVSS 9.8 (critical): A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote…
• CVE-2023-31459 — CVSS 8.8 (high): A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an…
• CVE-2023-39289 — CVSS 7.5 (high): A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated…
• CVE-2023-25599 — CVSS 7.4 (high): A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated…
• CVE-2023-31460 — CVSS 7.2 (high): A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated…
• CVE-2022-41223 — CVSS 6.8 (medium) — actively exploited: The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a…
• CVE-2022-40765 — CVSS 6.8 (medium) — actively exploited: A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker…
• CVE-2018-9102 — CVSS 6.5 (medium): A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST…
• CVE-2018-9101 — CVSS 6.1 (medium): A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST…
• CVE-2023-25598 — CVSS 6.1 (medium): A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could…
• CVE-2018-9104 — CVSS 6.1 (medium): A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST…
• CVE-2018-9103 — CVSS 6.1 (medium): A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST…
• CVE-2020-12679 — CVSS 6.1 (medium): A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect…
• CVE-2018-3639 — CVSS 5.5 (medium): Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior…
• CVE-2023-39287 — CVSS 5.5 (medium): A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated…
• CVE-2023-39288 — CVSS 5.5 (medium): A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated…
• CVE-2023-39290 — CVSS 4.9 (medium): A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated…
• CVE-2023-39291 — CVSS 4.9 (medium): A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with…
• CVE-2023-39285 — CVSS 4.3 (medium): A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated…