Browse CVEs

MEDIUM 5.5 CVE-2023-39287 A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with ele… Mivoice Connect after 22.24.5800.0 Fix from $1,6002023-08-25 MEDIUM 5.5 CVE-2023-39288 A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with ele… Mivoice Connect after 9.6.2304.102 Fix from $1,6002023-08-25 CRITICAL 9.8 CVE-2023-39293 A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor t… Mivoice Office 400 after 7.0.9281 Fix from $2,3002023-08-14 CRITICAL 9.8 CVE-2023-39292 A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to ac… Mivoice Office 400 after 7.0.9281 Fix from $2,3002023-08-14 CRITICAL 9.8 CVE-2023-32748 The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network… Mivoice Connect after 22.24.1500.0 Fix from $2,3002023-08-14 CRITICAL 9.8 CVE-2023-31458 A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated at… Mivoice Connect after 22.24.1500.0 Fix from $2,3002023-05-24 HIGH 7.4 CVE-2023-25599 A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to cond… Mivoice Connect after 22.24.1500.0 Fix from $1,9502023-05-24 HIGH 8.8 CVE-2023-31459 A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated at… Mivoice Connect after 9.6.2208.101 Fix from $1,9502023-05-24 HIGH 7.2 CVE-2023-31460 A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker w… Mivoice Connect after 9.6.2208.101 Fix from $1,9502023-05-24 CRITICAL 9.8 CVE-2023-31457 A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthentic… Mivoice Connect after 22.24.1500.0 Fix from $2,3002023-05-24 MEDIUM 6.1 CVE-2023-25598 A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an … Mivoice Connect after 22.24.1500.0 Fix from $1,6002023-05-24 MEDIUM 5.9 CVE-2023-25597 A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file… Micollab 9.7+ Fix from $1,6002023-04-14 HIGH 7.5 CVE-2023-22854 The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary … Micontact Center Business 9.4.2.0+ Fix from $1,9502023-02-13 CRITICAL 9.8 CVE-2022-41326 The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper… Micollab after 9.6.0.105 Fix from $2,3002022-11-22 MEDIUM 6.8 CVE-2022-41223 KEVEPSS 11% The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection atta… Mivoice Connect after 22.22.6100.0 Fix from $1,6002022-11-22 MEDIUM 6.8 CVE-2022-40765 KEVEPSS 10% A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with interna… Mivoice Connect after 22.22.6100.0 Fix from $1,6002022-11-22 CRITICAL 9.8 CVE-2022-36452 A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious fil… Micollab 9.6+ Fix from $2,3002022-10-25 HIGH 8.8 CVE-2022-36451 A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server… Micollab after 9.5.0.101 Fix from $1,9502022-10-25 HIGH 8.8 CVE-2022-36453 A vulnerability in the MiCollab Client API of Mitel MiCollab 9.1.3 through 9.5.0.101 could allow an authenticated attacker to modify their profile pa… Micollab after 9.5.0.101 Fix from $1,9502022-10-25 MEDIUM 6.5 CVE-2022-36454 A vulnerability in the MiCollab Client API of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to modify their profile paramete… Micollab after 9.5.0.101 Fix from $1,6002022-10-25 CRITICAL 9.8 CVE-2022-31784 A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unaut… Mivoice Business after 9.3.0.27 Fix from $2,3002022-06-17 MEDIUM 6.8 CVE-2022-29854 A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker wi… Minet Firmware after 1.8.0.12 Fix from $1,6002022-05-13 MEDIUM 6.8 CVE-2022-29855 Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Seri… 6873i Sip Firmware 5.1.0.8017 / 6.1.0.171+ Fix from $1,6002022-05-11 CRITICAL 9.8 CVE-2022-29499 KEVEPSS 55% The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Serv… Mivoice Connect after 22.20.2300.0 Fix from $2,3002022-04-26 CRITICAL 9.8 CVE-2022-26143 KEVEPSS 87% The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain s… Micollab 9.4+ Fix from $2,3002022-03-10 CRITICAL 9.1 CVE-2021-3352 The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticat… Micontact Center Business after 9.3.1.0 Fix from $2,3002021-08-13 CRITICAL 9.8 CVE-2021-32071 The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due to improper access control. A … Micollab 9.3+ Fix from $2,3002021-08-13 MEDIUM 6.5 CVE-2021-27402 The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbi… Micollab 9.2+ Fix from $1,6002021-08-13 MEDIUM 6.5 CVE-2021-32067 The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP respo… Micollab 9.3+ Fix from $1,6002021-08-13 MEDIUM 6.5 CVE-2021-32072 The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information (disclosing sensitive appli… Micollab 9.3+ Fix from $1,6002021-08-13