Mitel Cmg Suite vulnerabilities

4 CVEs affecting Mitel Cmg Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28815, published 2024-03-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-19275, published 2019-04-02. Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days. The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute…
CVE-2018-18285, published 2019-04-25. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login…
CVE-2018-18286, published 2019-04-25. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd…
CVE-2024-28815, published 2024-03-27. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or…