Vulnerabilities > Mitel > Mivoice Connect Client

DATE CVE VULNERABILITY TITLE RISK
2020-04-17 CVE-2020-10377 Inadequate Encryption Strength vulnerability in Mitel Mivoice Connect and Mivoice Connect Client
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials.
network
low complexity
mitel CWE-326
5.0
2020-04-17 CVE-2020-10211 Improper Input Validation vulnerability in Mitel Mivoice Connect and Mivoice Connect Client
A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters.
network
low complexity
mitel CWE-20
7.5