mitel Vulnerability Advisory Catalog

Total 133 security vulnerabilities recorded for mitel software and firmware.

← Back to All Vendors
Component: cx

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an una...

📅 2026-01-15
CVSS 8.2 Dossier →
CVE-2025-67822 CRITICAL
Component: mivoice_mx-one

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthentic...

📅 2026-01-15
CVSS 9.4 Dossier →
Component: micollab

A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker...

📅 2025-08-08
CVSS 8.8 Dossier →
Component: micollab

Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient i...

📅 2024-12-10
CVSS 2.7 Dossier →
Component: micollab

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthentica...

📅 2024-10-21
CVSS 6.5 Dossier →
Component: micollab

A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) t...

📅 2024-10-21
CVSS 8.8 Dossier →
CVE-2024-41713 CRITICAL
Component: micollab

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated atta...

📅 2024-10-21
CVSS 9.1 Dossier →
Component: micollab

A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a command injecti...

📅 2024-10-21
CVSS 6.6 Dossier →
Component: micollab

A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could a...

📅 2024-10-21
CVSS 5.6 Dossier →
CVE-2024-35314 CRITICAL
Component: micollab

A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could a...

📅 2024-10-21
CVSS 9.8 Dossier →
Component: micollab

A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allow an authenticated attacker wit...

📅 2024-10-21
CVSS 6.7 Dossier →
CVE-2024-35286 CRITICAL
Component: micollab

A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due...

📅 2024-10-21
CVSS 9.8 Dossier →
CVE-2024-35285 CRITICAL
Component: micollab

A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a command injection attack...

📅 2024-10-21
CVSS 9.8 Dossier →
Component: micollab

A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administra...

📅 2024-10-21
CVSS 4.8 Dossier →
Component: micollab

A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privil...

📅 2024-10-21
CVSS 4.8 Dossier →
Component: micollab

A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privil...

📅 2024-10-21
CVSS 7.2 Dossier →
Component: micollab

A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administra...

📅 2024-10-21
CVSS 7.2 Dossier →
Component: micollab

A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthentic...

📅 2024-10-21
CVSS 8.2 Dossier →
CVE-2024-47223 CRITICAL
Component: micollab

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthentica...

📅 2024-10-21
CVSS 9.4 Dossier →
Component: micollab

The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenti...

📅 2024-10-21
CVSS 7.7 Dossier →
Component: micontact_center_business

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an...

📅 2024-10-01
CVSS 8.1 Dossier →
Component: mivoice_mx-one

The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass a...

📅 2024-08-13
CVSS 8.8 Dossier →
Component: 6970_firmware

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136...

📅 2024-08-12
CVSS 7.2 Dossier →
Component: 6869i_sip_firmware

On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (sen...

📅 2024-06-09
CVSS 8.8 Dossier →
Page 1 of 6 (133 Total Records)