Approved changes feed: RSS · Atom
cpe:2.3:a:mitel:st14.2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mitel (750d81d3-7166-5542-b6c5-c328632b06f9) |
|---|---|
| Product | St14.2 (8c194cba-ce14-5e27-98cd-652c7c7b2fdc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-5782 |
vulnerable | 2026-06-08 05:11:51.935122 |
Details available
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.
Published: 2018-03-14T16:00:00.000Z
Updated: 2024-08-05T05:47:55.920Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5781 |
vulnerable | 2026-06-08 05:11:51.934750 |
Details available
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vendrecording.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.
Published: 2018-03-14T16:00:00.000Z
Updated: 2024-08-05T05:40:51.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5780 |
vulnerable | 2026-06-08 05:11:51.934410 |
Details available
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vnewmeeting.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.
Published: 2018-03-14T16:00:00.000Z
Updated: 2024-08-05T05:40:51.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5779 |
vulnerable | 2026-06-08 05:11:51.933972 |
Details available
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a malicious script into a newly generated PHP file and then execute the generated file using specially crafted requests. Successful exploit could allow an attacker to execute arbitrary code within the context of the application.
Published: 2018-03-14T16:00:00.000Z
Updated: 2024-08-05T05:40:51.269Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16251 |
vulnerable | 2026-06-08 05:09:00.296583 |
Details available
A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of the application.
Published: 2018-03-13T19:00:00.000Z
Updated: 2024-08-05T20:20:05.231Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16250 |
vulnerable | 2026-06-08 05:09:00.296216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.