CVE-2017-16250: Mitel ST14.2

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names.

Affected products

• Mitel ST14.2: up to and including ga28

Published 2018-03-13. Last modified 2026-06-17.