Veille CVE

Mardi 21 février 2023

3 CVE

  1. CVE-2022-47986 – Non évaluée Exploitée Rançongiciel

    IBM Aspera Faspex

    IBM Aspera Faspex Code Execution Vulnerability — IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.

  2. CVE-2022-41223 – Non évaluée Exploitée Rançongiciel

    Mitel MiVoice Connect

    Mitel MiVoice Connect Code Injection Vulnerability — The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

  3. CVE-2022-40765 – Non évaluée Exploitée Rançongiciel

    Mitel MiVoice Connect

    Mitel MiVoice Connect Command Injection Vulnerability — The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.