CVE-2022-41223CISA KEVEPSS p95.3%

CVE-2022-41223Mitel MiVoice Connect Code Injection Vulnerability

Mitel / MiVoice Connect

Description

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

Scoring

CVSS 6.8 ()
VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS10.57% probability of exploitation · percentile 95.3% · 2026-08-03T12:00:16Z
Last modified2026-06-17

CISA KEV entry

Added to KEV: 2023-02-21

(incoming)1

TypeTargetConfidenceTier
KEVEntryMitel MiVoice Connect Code Injection Vulnerabilitykev-cve-2022-412230%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Mitel MiVoice Connect Command Injection Vulnerability
CVE
Mitel MiVoice Connect Data Validation Vulnerability
CVE
MiCollab, MiVoice Business Express Access Control Vulnerability
CVE
Mitel MiCollab Path Traversal Vulnerability
CVE
CVE-2025-21302
CVE
CVE-2025-21339
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.