← Back to CVE List

CVE-2023-22854

Published: 2023-02-13T18:15Z
Last Modified: 2025-03-21T19:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt