Approved changes feed: RSS · Atom

cpe:2.3:o:mitel:st_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMitel (750d81d3-7166-5542-b6c5-c328632b06f9)
ProductSt Firmware (67cf92d7-b262-5312-a54a-4658ba9df62b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-12901 vulnerable 2026-06-08 05:10:42.100631 Details available
A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the signin.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
Published: 2018-10-23T21:00:00.000Z
Updated: 2024-08-05T08:45:02.483Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.