Vulnerabilities (CVE)

Filtered by vendor Mitel Subscribe
Filtered by product Mivoice Connect Client
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10377 1 Mitel 2 Mivoice Connect, Mivoice Connect Client 2023-12-10 5.0 MEDIUM 9.8 CRITICAL
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials.
CVE-2020-10211 1 Mitel 2 Mivoice Connect, Mivoice Connect Client 2023-12-10 7.5 HIGH 9.8 CRITICAL
A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.