Vulnerabilities (CVE)

Filtered by vendor Mitel Subscribe
Filtered by product Mivoice Connect Client
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10377 1 Mitel 1 Mivoice Connect Client 2025-11-03 5.0 MEDIUM 9.8 CRITICAL
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials.
CVE-2020-12456 1 Mitel 1 Mivoice Connect Client 2025-11-03 6.5 MEDIUM 8.8 HIGH
A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform directory traversal, and execute arbitrary scripts in the context of the Connect client.