Mitel Cmg Suite vulnerabilities
3 vulnerabilities
Known vulnerabilities in Mitel Cmg Suite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2018-18285mitel · cmg_suitemitel cmg_suiteSQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.CVSS9.8CriticalEPSS2.15%PrioritiseCVE-2018-18286mitel · cmg_suitemitel cmg_suiteSQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.CVSS9.8CriticalEPSS2.15%PrioritiseCVE-2018-19275mitel · cmg_suite +1 moremitel cmg_suiteThe BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.CVSS10.0CriticalEPSS4.61%