Mitel vulnerabilities

Products

• Micollab 48
• Mivoice Connect 23
• Micontact Center Business 11
• Mivoice Office 400 8
• Connect Onsite 7
• Micollab Audio\, Web \& Video Conferencing 6
• St14.2 6
• 6800 Series Sip Phones 5
• Micloud Management Portal 5
• 6869i Sip Firmware 4
• 6900 Series Sip Phones 4
• 6970 Firmware 4
• Cmg Suite 4
• St 14.2 4
• 6873i Sip Firmware 3
• 6900w Series Sip Phone 3
• 6930 Sip Firmware 3
• 6940 Sip Firmware 3
• 6970 Conference Unit 3
• Mivoice Business 3
• Mivoice Business Express 3
• Mivoice Business Solution Virtual Instance 3
• Mivoice Connect 3
• Mivoice Office 400 3
• 6865i Sip Firmware 2
• 6867i Sip Firmware 2
• 6869i Firmware 2
• 6905 Firmware 2
• 6905 Sip Firmware 2
• 6910 Firmware 2
• 6910 Sip Firmware 2
• 6920 Firmware 2
• 6920 Sip Firmware 2
• 6930 Firmware 2
• 6940 Firmware 2
• Businesscti Enterprise 2
• Inattend 2
• Mivoice Business Solutions Virtual Instance 2
• Mivoice Connect Client 2
• Mivoice Mx-one 2
• Mivoice Office 400 Smb Controller Firmware 2
• Unify Openscape Xpressions Webassistant 2

Newest

• mitel mivoice office 400 Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution CVE-2026-104811 8.4 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability CVE-2026-104810 8.4 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution CVE-2026-104809 8.4 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 stored Cross-Site Scripting CVE-2026-104808 1.9 LowOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 stored Cross-Site Scripting CVE-2026-104807 1.9 LowOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure CVE-2026-104806 5.5 MediumOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution CVE-2026-104805 8.5 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 view system files path traversal CVE-2026-104706 8.4 HighOctober 5, 2026
• mitel cx, micontact center business +1 more A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2... CVE-2025-67823 8.2 HighJanuary 15, 2026
• mitel mivoice mx-one A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50)... CVE-2025-67822 9.4 CriticalJanuary 15, 2026
• mitel micollab A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1... CVE-2025-52914 Public exploit 8.8 HighAugust 8, 2025
• mitel micollab Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative... CVE-2024-55550 In KEV EPSS 38.2% 2.7 LowDecember 10, 2024
• mitel micollab A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab... CVE-2024-47912 8.2 HighOctober 21, 2024
• mitel micollab A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab... CVE-2024-47224 6.5 MediumOctober 21, 2024
• mitel micollab A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab... CVE-2024-47223 9.4 CriticalOctober 21, 2024
• mitel micollab The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab... CVE-2024-47189 7.7 HighOctober 21, 2024
• mitel micollab, mivoice business solution virtual instance, mivoice business solutions virtual instance +2 more A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and... CVE-2024-41714 8.8 HighOctober 21, 2024
• mitel micollab A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8... CVE-2024-41713 In KEVPublic exploit EPSS 97.2% 9.1 CriticalOctober 21, 2024
• mitel micollab A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow... CVE-2024-41712 6.6 MediumOctober 21, 2024
• mitel micollab, mivoice business, mivoice business solution virtual instance +2 more A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business... CVE-2024-35315 Public exploit 5.6 MediumOctober 21, 2024
• mitel micollab, mivoice business solution virtual instance, mivoice business solutions virtual instance +2 more A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business... CVE-2024-35314 9.8 CriticalOctober 21, 2024
• mitel micollab A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8... CVE-2024-35287 6.7 MediumOctober 21, 2024
• mitel micollab A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an... CVE-2024-35286 EPSS 65.7% 9.8 CriticalOctober 21, 2024
• mitel micollab, micollab nupoint messanger +1 more A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an... CVE-2024-35285 9.8 CriticalOctober 21, 2024
• mitel micollab A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110... CVE-2024-30160 4.8 MediumOctober 21, 2024
• mitel micollab A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow... CVE-2024-30159 4.8 MediumOctober 21, 2024
• mitel micollab A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow... CVE-2024-30158 7.2 HighOctober 21, 2024
• mitel micollab A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110... CVE-2024-30157 7.2 HighOctober 21, 2024
• mitel micontact center business A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4... CVE-2024-42514 8.1 HighOctober 1, 2024
• mitel 6900w series sip phone, 6970 conference unit, 6800 series sip phones +1 more +3 more A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the... CVE-2024-41711 6.8 MediumAugust 13, 2024
• mitel mivoice mx-one The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an... CVE-2024-36446 8.8 HighAugust 13, 2024
• mitel sip phones, 6863i sip firmware, 6865i sip firmware +14 more +16 more A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the... CVE-2024-41710 In KEV EPSS 41.6% 7.2 HighAugust 12, 2024
• mitel 6869i sip firmware, rev00 6868i , rev03 6869i +2 more On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform... CVE-2024-37570 8.8 HighJune 9, 2024
• mitel 6869i firmware, 6869i sip firmware +1 more An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A... CVE-2024-37569 8.8 HighJune 9, 2024
• mitel micontact center business A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to… CVE-2024-35284 5.4 MediumMay 29, 2024
• mitel micontact center business A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a stored cross-site scripting (XSS) attack due to insuffi… CVE-2024-35283 6.1 MediumMay 29, 2024
• mitel 6900 series sip phones, 6970 conference unit, 6800 series sip phones +2 more A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones, including 6970 Conference Unit,... CVE-2024-31967 9.1 CriticalMay 2, 2024
• mitel 6800 series firmware, 6900 series firmware, 6900w series firmware +1 more +3 more A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones, including 6970 Conference Unit,... CVE-2024-31966 6.2 MediumMay 2, 2024
• mitel 6900 series sip phones, 6800 series sip phones +1 more A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones, including 6970 Conference Unit,... CVE-2024-31965 4.2 MediumMay 2, 2024
• mitel 6900w series sip phone, 6970 conference unit, 6800 series sip phones +2 more A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones, including 6970 Conference Unit,... CVE-2024-31964 Public exploit 7.5 HighMay 2, 2024
• mitel 6900 series sip phones, 6900w series sip phone, 6970 +1 more +3 more A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones, including 6970 Conference Unit,... CVE-2024-31963 6.4 MediumMay 2, 2024
• atos openscape desk phone ip 35g eco firmware, openscape desk phone ip 35g firmware, mitel 6905 firmware +13 more +15 more In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password). CVE-2024-28066 8.8 HighApril 8, 2024
• mitel inattend, cmg suite +1 more A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4... CVE-2024-28815 9.8 CriticalMarch 27, 2024
• mitel micontact center business A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4... CVE-2024-28070 6.8 MediumMarch 16, 2024
• mitel micontact center business A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4... CVE-2024-28069 7.5 HighMarch 16, 2024
• mitel unify openscape xpressions webassistant An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42... CVE-2023-40266 9.8 CriticalFebruary 8, 2024
• mitel unify openscape xpressions webassistant An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42... CVE-2023-40265 8.8 HighFebruary 8, 2024
• mitel connect mobility router A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6... CVE-2023-39286 4.3 MediumSeptember 14, 2023
• mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24... CVE-2023-39285 4.3 MediumSeptember 14, 2023
• mitel mivoice connect A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102... CVE-2023-39291 4.9 MediumAugust 25, 2023
• Show olderLoading…