{"id":"CVE-2022-41223","aliases":[],"url":"https://o3.security/vulnerability/CVE-2022-41223","summary":"The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient…","details":"The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.","published":"2022-11-22T01:15:32.897","modified":"2026-06-17T05:02:49.103","cvss":{"score":6.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.10571,"percentile":0.95476,"asOf":"2026-09-08"},"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://www.mitel.com/support/security-advisories"},{"type":"ADVISORY","url":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008"},{"type":"ADVISORY","url":"https://www.mitel.com/support/security-advisories"},{"type":"ADVISORY","url":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41223"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T05:02:49.103"}}