Filtered by vendor Mitel Subscriptions
Filtered by product Cmg Suite Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-19275 1 Mitel 2 Cmg Suite, Inattend 2024-08-05 N/A
The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.
CVE-2018-18286 1 Mitel 1 Cmg Suite 2024-08-05 N/A
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
CVE-2018-18285 1 Mitel 1 Cmg Suite 2024-08-05 N/A
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
CVE-2024-28815 1 Mitel 2 Cmg Suite, Inattend 2024-08-02 9.8 Critical
A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system.