cbcvebase.

Mitel Shoretel Firmware vulnerabilities

1 known vulnerability affecting mitel/shoretel_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2020-28351P3MEDIUMCVSS 6.1PoCv19.46.1802.02020-11-09
CVE-2020-28351 [MEDIUM] CWE-79 CVE-2020-28351: The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated att The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack (via the PATH_INFO to index.php) due to insufficient validation for the time_zone object in the HOME_MEETING& page.
nvd
Mitel Shoretel Firmware vulnerabilities | cvebase