Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-28351

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack (via the PATH_INFO to index.php) due to insufficient validation for the time_zone object in the HOME_MEETING& page.

CVSS 3.1 · 6.1 Medium EPSS 16.0% KEV · Not listed
Vendors
Mitel
Products
Shoretel Shoretel Firmware
CVE-2020-12679

A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATH_INFO to home.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Mitel
Products
Mivoice Connect Shoretel Conference Web