Mitel Micloud Management Portal vulnerabilities
4 vulnerabilities
Known vulnerabilities in Mitel Micloud Management Portal, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2020-24595mitel · micloud_management_portalmitel micloud_management_portalMitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.CVSS5.3MediumEPSS0.91%PrioritiseCVE-2020-24594mitel · micloud_management_portalmitel micloud_management_portalMitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.CVSS9.6CriticalEPSS1.71%RoutineCVE-2020-24593mitel · micloud_management_portalmitel micloud_management_portalMitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation.CVSS7.2HighEPSS1.10%RoutineCVE-2020-24592mitel · micloud_management_portalmitel micloud_management_portalMitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization.CVSS5.3MediumEPSS0.87%