GCVE - cpe:2.3:a:mitel:mivoice_connect:19.3:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mitel:mivoice_connect:19.3:-:*:*:*:*:*:*

part: a version: 19.3 update: -

Vendor	Mitel (`750d81d3-7166-5542-b6c5-c328632b06f9`)
Product	Mivoice Connect (`cd4409d8-f1ee-5415-aa7c-c5099b625b83`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-25599`	vulnerable	2026-06-08 05:56:09.321476	Details available A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an attacker to execute arbitrary scripts. Published: 2023-05-24T00:00:00.000Z Updated: 2025-01-16T20:15:52.982Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0003	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41223`	vulnerable	2026-06-08 05:48:30.030341	Details available The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type. Published: 2022-11-22T00:00:00.000Z Updated: 2025-10-21T23:15:30.959Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40765`	vulnerable	2026-06-08 05:48:28.090057	Details available A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters. Published: 2022-11-22T00:00:00.000Z Updated: 2025-10-21T23:15:31.091Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0007	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.