Mitel Shoretel Firmware 19.46.1802.0
Approved changes feed: RSS · Atom
cpe:2.3:o:mitel:shoretel_firmware:19.46.1802.0:*:*:*:*:*:*:*
part: o version: 19.46.1802.0 update: *
| Vendor | Mitel (750d81d3-7166-5542-b6c5-c328632b06f9) |
|---|---|
| Product | Shoretel Firmware (3c4644d4-0d66-5ce7-88c9-beb66396a8e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-28351 |
vulnerable | 2026-06-08 05:23:54.024452 |
Details available
The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack (via the PATH_INFO to index.php) due to insufficient validation for the time_zone object in the HOME_MEETING& page.
Published: 2020-11-09T03:58:36.000Z
Updated: 2024-08-04T16:33:59.089Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.