Mitel Shoretel Conference Web vulnerabilities

1 vulnerability

Known vulnerabilities in Mitel Shoretel Conference Web, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2020-12679mitel · mivoice_connect +1 moremitel mivoice_connectA reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATH_INFO to home.php.CVSS6.1MediumEPSS0.77%