[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1kZKfaBLuhafY_ctNajRHd11bLNtitO3FaAKLuFU2R4":3,"g5a-ex:mitel\u002Fst14.2@*":75,"g5a-family:mitel\u002Fst14.2":77},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":52,"seoMetadata":53,"meta":72},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"mitel","st14.2",1,6,0,"2018-03-14",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"ga28",false,"St14.2 by Mitel is a technology product with 1 tracked version and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,28,32,39,43,46],{"cveId":22,"description":23,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":27},"CVE-2018-5782","A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.",9.8,"v3.0","Critical",0.1872,{"cveId":29,"description":30,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":31},"CVE-2018-5779","A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a malicious script into a newly generated PHP file and then execute the generated file using specially crafted requests. Successful exploit could allow an attacker to execute arbitrary code within the context of the application.",0.02718,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":25,"severity":37,"isKev":16,"epssScore":38},"CVE-2017-16251","A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of the application.","2018-03-13",8.8,"High",0.01753,{"cveId":40,"description":41,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":42},"CVE-2018-5780","A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vnewmeeting.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.",0.0173,{"cveId":44,"description":45,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":42},"CVE-2018-5781","A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vendrecording.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.",{"cveId":47,"description":48,"publishedDate":35,"cvssScore":49,"cvssVersion":25,"severity":50,"isKev":16,"epssScore":51},"CVE-2017-16250","A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names.",5.3,"Medium",0.00853,[],{"title":54,"metaDescription":55,"keywords":56,"structuredData":57},"St14.2 by Mitel - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for St14.2 by Mitel covering 1 version with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","St14.2 vulnerabilities, St14.2 security, St14.2 CVE, Mitel St14.2, St14.2 threat intelligence, Mitel security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":58,"@type":59,"name":60,"description":55,"url":61,"manufacturer":62,"applicationCategory":66,"softwareVersion":67,"mainEntity":68},"https:\u002F\u002Fschema.org","SoftwareApplication","St14.2","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmitel\u002Fst14.2",{"@type":63,"name":64,"url":65},"Organization","Mitel","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmitel","Security Software","1 versions tracked",{"@type":69,"name":70,"description":71,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","St14.2 Security Vulnerabilities","Security vulnerabilities affecting St14.2 by Mitel",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":73,"apiVersion":74},"2026-10-18T17:27:24.113Z","3.0",{"rows":76,"total":11,"capped":16,"failed":11},[],[]]