Browse CVEs

MEDIUM 6.1 CVE-2021-27401 The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrar… Micollab 9.2+ Fix from $1,6002021-08-13 MEDIUM 5.4 CVE-2021-32070 The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking attack due to an insecure header… Micollab 9.3+ Fix from $1,6002021-08-13 CRITICAL 9.8 CVE-2021-26714 The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access restricted files and folders due t… Micontact Center Enterprise 9.4+ Fix from $2,3002021-03-29 CRITICAL 9.1 CVE-2020-35547 A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access (view and modify) t… Micollab after 9.2 Fix from $2,3002021-01-29 HIGH 8.0 CVE-2021-3176 The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain acc… Businesscti Enterprise 6.4.15 / 7.1.2+ Fix from $1,9502021-01-29 HIGH 8.8 CVE-2020-27154 The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access … Businesscti Enterprise 6.4.11 / 7.0.3+ Fix from $1,9502020-12-18 HIGH 8.1 CVE-2020-27639 The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within… 6873i Sip Firmware 5.1.0+ Fix from $1,9502020-12-18 HIGH 8.1 CVE-2020-27640 The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth… Mivoice 6940 Firmware 1.5.3+ Fix from $1,9502020-12-18 HIGH 7.2 CVE-2020-25608 The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection. Micollab 9.2+ Fix from $1,9502020-12-18 MEDIUM 6.1 CVE-2020-25606 The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input val… Micollab 9.2+ Fix from $1,6002020-12-18 MEDIUM 6.1 CVE-2020-25611 The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending arbitrary code due to imprope… Micollab 9.2+ Fix from $1,6002020-12-18 MEDIUM 6.1 CVE-2020-27340 The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious scri… Micollab 9.2+ Fix from $1,6002020-12-18 MEDIUM 5.4 CVE-2020-25609 The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insufficient inpu… Micollab 9.2+ Fix from $1,6002020-12-18 MEDIUM 5.3 CVE-2020-25610 The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insufficient access control for conf… Micollab 9.2+ Fix from $1,6002020-12-18 MEDIUM 6.1 CVE-2020-28351EPSS 16% The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting… Shoretel Firmware No fix yet Fix from $1,6002020-11-09 CRITICAL 9.6 CVE-2020-24594 Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validat… Micloud Management Portal after 6.0 Fix from $2,3002020-09-25 HIGH 7.2 CVE-2020-24593 Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to imp… Micloud Management Portal after 6.0 Fix from $1,9502020-09-25 HIGH 7.1 CVE-2020-24692 The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input va… Micontact Center Business 9.3.0.0+ Fix from $1,9502020-09-25 MEDIUM 5.3 CVE-2020-24592 Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient … Micloud Management Portal after 6.0 Fix from $1,6002020-09-25 MEDIUM 5.3 CVE-2020-24595 Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insuff… Micloud Management Portal after 6.0 Fix from $1,6002020-09-25 HIGH 8.8 CVE-2020-12456 A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the … Mivoice Connect Client 214.100.1223.0+ Fix from $1,9502020-08-26 HIGH 7.5 CVE-2020-11797 An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.… Micollab Audio\, Web \& Video Conferencing 8.1.2.4 / 9.1.3+ Fix from $1,9502020-08-26 HIGH 8.1 CVE-2020-13863 The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to … Micollab 9.1.3+ Fix from $1,9502020-08-26 HIGH 7.5 CVE-2020-13617 The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expos… 6863 Firmware after 5.0 Fix from $1,9502020-08-26 MEDIUM 5.9 CVE-2020-13767 The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient acc… Micollab 9.1.332+ Fix from $1,6002020-08-26 MEDIUM 5.3 CVE-2020-11798EPSS 49% A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker… Micollab Audio\, Web \& Video Conferencing 8.1.2.4 / 9.1.3+ Fix from $1,6002020-06-10 MEDIUM 6.1 CVE-2020-12679 A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 al… Mivoice Connect 21.90.9743.0+ Fix from $1,6002020-05-07 CRITICAL 9.8 CVE-2020-10211 A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to exe… Mivoice Connect 22.11.4900.0+ Fix from $2,3002020-04-17 CRITICAL 9.8 CVE-2020-10377 A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user … Mivoice Connect Client after 214.100.1213.0 Fix from $2,3002020-04-17 CRITICAL 9.8 CVE-2019-19607 A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to ins… Micollab Audio\, Web \& Video Conferencing after 8.1.1.11 Fix from $2,3002020-03-02