Approved changes feed: RSS · Atom

cpe:2.3:h:mitel:shoretel:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMitel (750d81d3-7166-5542-b6c5-c328632b06f9)
ProductShoretel (ca44c6b1-f319-507b-a081-1c97a056c515)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28351 not_vulnerable 2026-06-08 05:23:54.025005 Details available
The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack (via the PATH_INFO to index.php) due to insufficient validation for the time_zone object in the HOME_MEETING& page.
Published: 2020-11-09T03:58:36.000Z
Updated: 2024-08-04T16:33:59.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.