Mitel Unify Openscape Xpressions Webassistant vulnerabilities

2 CVEs affecting Mitel Unify Openscape Xpressions Webassistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40266, published 2024-02-08.

More from Mitel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-40265, published 2024-02-08. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload.
• CVE-2023-40266, published 2024-02-08. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path traversal.