CVE-2017-16251 | BDVDB-2026-97718 Detail

Description#

A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of the application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004

Exploit#

No public exploit known

History#

Version 12018-03-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.