mitel Vulnerability Advisory Catalog

Total 133 security vulnerabilities recorded for mitel software and firmware.

← Back to All Vendors
Component: 6869i_sip_firmware

An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname p...

📅 2024-06-09
CVSS 8.8 Dossier →
Component: micontact_center_business

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a ...

📅 2024-05-29
CVSS 5.4 Dossier →
Component: micontact_center_business

A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a store...

📅 2024-05-29
CVSS 6.1 Dossier →
Component: 6940w_firmware

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password)....

📅 2024-04-08
CVSS 8.8 Dossier →
Component: micontact_center_business

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a ...

📅 2024-03-16
CVSS 6.8 Dossier →
Component: micontact_center_business

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct an...

📅 2024-03-16
CVSS 7.5 Dossier →
CVE-2023-40266 CRITICAL
Component: unify_openscape_xpressions_webassistant

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path traversal....

📅 2024-02-08
CVSS 9.8 Dossier →
Component: unify_openscape_xpressions_webassistant

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution vi...

📅 2024-02-08
CVSS 8.8 Dossier →
Component: connect_mobility_router

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perf...

📅 2023-09-14
CVSS 4.3 Dossier →
Component: mivoice_connect

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perf...

📅 2023-09-14
CVSS 4.3 Dossier →
Component: mivoice_connect

A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated p...

📅 2023-08-25
CVSS 4.9 Dossier →
Component: mivoice_connect

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with ele...

📅 2023-08-25
CVSS 4.9 Dossier →
Component: mivoice_connect

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to cond...

📅 2023-08-25
CVSS 7.5 Dossier →
Component: mivoice_connect

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elev...

📅 2023-08-25
CVSS 5.5 Dossier →
Component: mivoice_connect

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elev...

📅 2023-08-25
CVSS 5.5 Dossier →
CVE-2023-39293 CRITICAL
Component: mivoice_office_400

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to...

📅 2023-08-14
CVSS 9.8 Dossier →
CVE-2023-39292 CRITICAL
Component: mivoice_office_400

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to acc...

📅 2023-08-14
CVSS 9.8 Dossier →
CVE-2023-32748 CRITICAL
Component: mivoice_connect

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network ...

📅 2023-08-14
CVSS 9.8 Dossier →
CVE-2023-31458 CRITICAL
Component: mivoice_connect

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated att...

📅 2023-05-24
CVSS 9.8 Dossier →
Component: mivoice_connect

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to condu...

📅 2023-05-24
CVSS 7.4 Dossier →
Component: mivoice_connect

A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker wi...

📅 2023-05-24
CVSS 7.2 Dossier →
Component: mivoice_connect

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated att...

📅 2023-05-24
CVSS 8.8 Dossier →
CVE-2023-31457 CRITICAL
Component: mivoice_connect

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthentica...

📅 2023-05-24
CVSS 9.8 Dossier →
Component: mivoice_connect

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an u...

📅 2023-05-24
CVSS 6.1 Dossier →
Page 2 of 6 (133 Total Records)