CVE-2022-40765

2022-11-2200:00:00

mitre

www.cve.org

vulnerability

mitel mivoice connect

edge gateway

authenticated

command injection

url parameters

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.