Back to CVE Browser

CVE-2022-41223

🔥 Known Exploited (CISA KEV)MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-11-22

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.

Affected Platforms (CPE)

📦

Mitel

Mivoice Connect

<= 22.22.6100.0

References & Advisories

🔗 https://www.mitel.com/support/security-advisories

🔗 https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008

🔗 https://www.mitel.com/support/security-advisories

🔗 https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41223

Related Vulnerabilities

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

CVE-2026-645247.7

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback ...

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobject path lookup in DualSense match...

CVE-2026-644599.8

In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Commit ...