[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-lVhcpFsyjWjlAXqgfBBAmz5uxJi6CRoG_Yy2Gn5Udk":3,"g5a-family:mitel\u002Fmivoice_connect":209,"g5a-ex:mitel\u002Fmivoice_connect@*":212},{"success":4,"data":5},true,{"product":6,"versions":82,"topVulnerabilitiesByEpss":115,"kevVulnerabilities":174,"seoMetadata":187,"meta":206},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":81},"mitel","mivoice_connect",32,25,3,"2023-09-14",[14,18,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"19.1",0,false,{"version":19,"cve_count":11,"kev_count":20,"has_kev":4},"19.3",2,{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},"214.100.1222.0",{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},"214.100.1223.0",{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},"21.82.9630.0",{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},"21.82.9645.0",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"21.84.5523.0",{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},"21.84.5535.0",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"21.84.5543.0",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"21.86.1828.0",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"21.87.3629.0",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"21.87.9727.0",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"21.88.3731.0",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"21.88.3753.0",{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"21.90.4127.0",{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},"21.90.9738.0",{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},"21.90.9743.0",{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"22.10.7600.0",{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},"22.11.4900.0",{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},"22.11.9300.0",{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},"22.13.4800.0",{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},"22.18.4000.0",{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},"22.18.4600.0",{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},"22.20.1300.0",{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},"22.20.2300.0",{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},"22.22.6100.0",{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"22.23.5600.0",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"22.24.1500.0",{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},"22.24.6900.0",{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},"22.24.7100.0",{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},"22.28.9700.0",{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},"23.30.4100.0","Mivoice Connect by Mitel is a technology product with 32 tracked versions and 25 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":20,"has_kev":4},{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},[116,124,131,137,141,148,153,159,166,171],{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":121,"severity":122,"isKev":17,"epssScore":123},"CVE-2018-3639","Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.","2018-05-22",5.5,"v3.1","Medium",0.60631,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":121,"severity":129,"isKev":4,"epssScore":130},"CVE-2022-29499","The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.","2022-04-26",9.8,"Critical",0.55242,{"cveId":132,"description":133,"publishedDate":134,"cvssScore":135,"cvssVersion":121,"severity":122,"isKev":4,"epssScore":136},"CVE-2022-41223","The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.","2022-11-22",6.8,0.10657,{"cveId":138,"description":139,"publishedDate":134,"cvssScore":135,"cvssVersion":121,"severity":122,"isKev":4,"epssScore":140},"CVE-2022-40765","A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.",0.10566,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":121,"severity":146,"isKev":17,"epssScore":147},"CVE-2020-12456","A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform directory traversal, and execute arbitrary scripts in the context of the Connect client.","2020-08-26",8.8,"High",0.03061,{"cveId":149,"description":150,"publishedDate":151,"cvssScore":128,"cvssVersion":121,"severity":129,"isKev":17,"epssScore":152},"CVE-2020-10211","A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.","2020-04-17",0.03046,{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"cvssVersion":121,"severity":146,"isKev":17,"epssScore":158},"CVE-2023-31460","A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters.","2023-05-24",7.2,0.0165,{"cveId":160,"description":161,"publishedDate":162,"cvssScore":163,"cvssVersion":164,"severity":122,"isKev":17,"epssScore":165},"CVE-2018-9102","A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the signin interface. A successful exploit could allow an attacker to extract sensitive information from the database.","2018-04-25",6.5,"v3.0",0.01052,{"cveId":167,"description":168,"publishedDate":162,"cvssScore":169,"cvssVersion":164,"severity":122,"isKev":17,"epssScore":170},"CVE-2018-9101","A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the launch_presenter.php page. A successful exploit could allow an attacker to execute arbitrary scripts.",6.1,0.01032,{"cveId":172,"description":173,"publishedDate":162,"cvssScore":169,"cvssVersion":164,"severity":122,"isKev":17,"epssScore":170},"CVE-2018-9104","A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the api.php page. A successful exploit could allow an attacker to execute arbitrary scripts.",[175,180,183],{"cveId":138,"description":139,"publishedDate":134,"cvssScore":135,"severity":122,"isKev":4,"epssScore":140,"cisaVulnName":176,"cisaDateAdded":177,"cisaShortDescription":178,"cisaRequiredAction":179},"Mitel MiVoice Connect Command Injection Vulnerability","2023-02-21","The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.","Apply updates per vendor instructions.",{"cveId":132,"description":133,"publishedDate":134,"cvssScore":135,"severity":122,"isKev":4,"epssScore":136,"cisaVulnName":181,"cisaDateAdded":177,"cisaShortDescription":182,"cisaRequiredAction":179},"Mitel MiVoice Connect Code Injection Vulnerability","The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.",{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"severity":129,"isKev":4,"epssScore":130,"cisaVulnName":184,"cisaDateAdded":185,"cisaShortDescription":186,"cisaRequiredAction":179},"Mitel MiVoice Connect Data Validation Vulnerability","2022-06-27","The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.",{"title":188,"metaDescription":189,"keywords":190,"structuredData":191},"Mivoice Connect by Mitel - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mivoice Connect by Mitel covering 32 versions with 25 tracked vulnerabilities including 1 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mivoice Connect vulnerabilities, Mivoice Connect security, Mivoice Connect CVE, Mitel Mivoice Connect, Mivoice Connect threat intelligence, Mitel security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Mivoice Connect KEV, Mivoice Connect exploited vulnerabilities",{"@context":192,"@type":193,"name":194,"description":189,"url":195,"manufacturer":196,"applicationCategory":200,"softwareVersion":201,"mainEntity":202},"https:\u002F\u002Fschema.org","SoftwareApplication","Mivoice Connect","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmitel\u002Fmivoice_connect",{"@type":197,"name":198,"url":199},"Organization","Mitel","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmitel","Security Software","32 versions tracked",{"@type":203,"name":204,"description":205,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mivoice Connect Security Vulnerabilities","Security vulnerabilities affecting Mivoice Connect by Mitel",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":207,"apiVersion":208},"2026-10-18T18:53:20.363Z","3.0",[210],{"product":211,"cves":20},"mivoice_connect_client",{"rows":213,"total":11,"capped":17,"failed":16},[214,219,223],{"cveId":138,"name":176,"severity":122,"cvss":135,"added":177,"epss":140,"published":215,"ranges":216,"checked":4,"hits":218,"covers":17},"2022-11-22T01:15:31.847",[217],"up to 22.22.6100.0",[],{"cveId":132,"name":181,"severity":122,"cvss":135,"added":177,"epss":136,"published":220,"ranges":221,"checked":4,"hits":222,"covers":17},"2022-11-22T01:15:32.897",[217],[],{"cveId":125,"name":184,"severity":129,"cvss":128,"added":185,"epss":130,"published":224,"ranges":225,"checked":4,"hits":227,"covers":17},"2022-04-26T02:15:37.107",[226],"up to 22.20.2300.0",[]]