Mitel

Records142All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical36CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Mitel records in CISA KEV

TI-2024-27770 Mitel SIP Phones Argument Injection Vulnerability CRITICAL 91KEV 2025-02-12 TI-2024-27773 Mitel MiCollab Path Traversal Vulnerability CRITICAL 98KEV 2025-01-07 TI-2024-36877 Mitel MiCollab Path Traversal Vulnerability HIGH 78KEV 2025-01-07 TI-2022-19391 Mitel MiVoice Connect Command Injection Vulnerability CRITICAL 89KEV 2023-02-21 TI-2022-19733 Mitel MiVoice Connect Code Injection Vulnerability CRITICAL 89KEV 2023-02-21 TI-2022-11960 Mitel MiVoice Connect Data Validation Vulnerability CRITICAL 100KEV 2022-06-27

Components

Products in the NVD configurations · select one to filter the records

Micollab 48 records CRITICAL Mivoice Connect 23 records CRITICAL Micontact Center Business 11 records MEDIUM Connect Onsite 7 records MEDIUM Micollab Audio, Web & Video Conferencing 6 records MEDIUM St14.2 6 records MEDIUM Micloud Management Portal 5 records MEDIUM 6869i Sip Firmware 4 records CRITICAL

Records

11 records in Micontact Center Business · all components

TI-2023-09008 CVE-2023-22854 · GHSA-q7q7-xc84-hcqj

The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0…

MEDIUM 48

The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.006 Published 2023-02-13 No fix listed CWE-839

TI-2021-02350 CVE-2021-3352 · GHSA-c753-3w82-9fgg

The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through…

MEDIUM 41

The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view and modify) user data without authorization…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0104 Published 2021-08-13 No fix listed

TI-2024-18658 CVE-2024-28069 · GHSA-4qgr-49jh-j3vp

A vulnerability in the legacy chat component of Mitel MiContact Center Business through…

MEDIUM 40

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct an information disclosure attack due to improper configuration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2024-03-16 No fix listed CWE-922

TI-2024-28479 CVE-2024-42514 · GHSA-jq66-g5qg-w7wf

A vulnerability in the legacy chat component of Mitel MiContact Center Business through…

LOW 38

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00446 Published 2024-10-01 No fix listed CWE-284

TI-2025-41470 CVE-2025-67823 · GHSA-7567-mgp8-r89c

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business…

LOW 36

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack d…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00333 Published 2026-01-15 No fix listed CWE-79

TI-2020-15153 CVE-2020-24692 · GHSA-6g59-7wc2-6wq7

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an…

LOW 32

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00419 Published 2020-09-25 No fix listed CWE-20

TI-2020-07499 CVE-2020-9379 · GHSA-vg66-2m2c-p54v

The Software Development Kit of the MiContact Center Business with Site Based Security…

LOW 31

The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00924 Published 2020-02-25 No fix listed

TI-2024-18659 CVE-2024-28070 · GHSA-g759-3922-4v5f

A vulnerability in the legacy chat component of Mitel MiContact Center Business through…

LOW 30

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00447 Published 2024-03-16 No fix listed CWE-79

TI-2024-23344 CVE-2024-35283

A vulnerability in the Ignite component of Mitel MiContact Center Business through…

LOW 27

A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a stored cross-site scripting (XSS) attack due to insufficient input validati…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00263 Published 2024-05-29 No fix listed CWE-79

TI-2024-23345 CVE-2024-35284

A vulnerability in the legacy chat component of Mitel MiContact Center Business through…

LOW 24

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00254 Published 2024-05-29 No fix listed CWE-79

TI-2020-15154 CVE-2020-24693 · GHSA-533p-xf32-32p2

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local…

LOW 16

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00275 Published 2020-12-18 No fix listed

Open these records in search →

Critical	36
High	41
Medium	61
Low	4
No CVSS	0