CVE-2023-40265: Mitel Unify Openscape Xpressions Webassistant

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload.

Affected products

• Mitel Unify Openscape Xpressions Webassistant: from 7.0, before 7r1_fr5_hf42_p911 (fixed in 7r1_fr5_hf42_p911)

Published 2024-02-08. Last modified 2026-06-17.