GCVE - cpe:2.3:a:mitel:connect_onsite:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mitel:connect_onsite:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mitel (`750d81d3-7166-5542-b6c5-c328632b06f9`)
Product	Connect Onsite (`3c0fbf13-945c-5953-ab8e-100326fe5962`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-9591`	vulnerable	2026-06-08 05:14:25.779791	Details available A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter. Published: 2019-03-06T16:00:00.000Z Updated: 2024-08-04T21:54:44.585Z Open on db.gcve.eu Reference links https://github.com/Ramikan/Vulnerabilities/blob/master/Shoretel%20Connect%20Multiple%20Vulnerability https://www.exploit-db.com/exploits/46666/ http://packetstormsecurity.com/files/152431/ShoreTel-Connect-ONSITE-Cross-Site-Scripting-Session-Fixation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5782`	vulnerable	2026-06-08 05:11:51.935098	Details available A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application. Published: 2018-03-14T16:00:00.000Z Updated: 2024-08-05T05:47:55.920Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004 https://www.exploit-db.com/exploits/46174/ https://github.com/twosevenzero/shoretel-mitel-rce	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5781`	vulnerable	2026-06-08 05:11:51.934727	Details available A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vendrecording.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application. Published: 2018-03-14T16:00:00.000Z Updated: 2024-08-05T05:40:51.317Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5780`	vulnerable	2026-06-08 05:11:51.934386	Details available A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vnewmeeting.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application. Published: 2018-03-14T16:00:00.000Z Updated: 2024-08-05T05:40:51.263Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5779`	vulnerable	2026-06-08 05:11:51.933297	Details available A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a malicious script into a newly generated PHP file and then execute the generated file using specially crafted requests. Successful exploit could allow an attacker to execute arbitrary code within the context of the application. Published: 2018-03-14T16:00:00.000Z Updated: 2024-08-05T05:40:51.269Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.