Filtered by vendor Mitel Subscriptions
Filtered by product Cmg Suite Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-19275 1 Mitel 2 Cmg Suite, Inattend 2020-08-24 N/A
The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.
CVE-2018-18286 1 Mitel 1 Cmg Suite 2019-04-26 N/A
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
CVE-2018-18285 1 Mitel 1 Cmg Suite 2019-04-26 N/A
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.