mitel security advisories
19 threat alerts tracking vulnerabilities and security advisories that affect mitel products.
Vulnios monitors mitel CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent mitel security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-35286 — mitel — micollab
A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A suc
criticalCVE-2024-35286Critical Vulnerability: CVE-2021-3352 — mitel — micontact_center_business
The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view and modify) user data w
criticalCVE-2021-3352Critical Vulnerability: CVE-2021-32071 — mitel — micollab
The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due to improper access control. A successful exploit could allow an attacker to view
criticalCVE-2021-32071Critical Vulnerability: CVE-2021-26714 — mitel — micontact_center_enterprise
The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access restricted files and folders due to insufficient access control. A successful exploit
criticalCVE-2021-26714Critical Vulnerability: CVE-2020-35547 — mitel — micollab
A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access (view and modify) to user data.
criticalCVE-2020-35547Critical Vulnerability: CVE-2020-24594 — mitel — micloud_management_portal
Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an a
criticalCVE-2020-24594Critical Vulnerability: CVE-2020-10377 — mitel — mivoice_connect_client
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an at
criticalCVE-2020-10377Critical Vulnerability: CVE-2020-10211 — mitel — mivoice_connect
A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validati
criticalCVE-2020-10211Critical Vulnerability: CVE-2019-19607 — mitel — micollab_audio\,_web_\&_video_conferencing
A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session paramete
criticalCVE-2019-19607Critical Vulnerability: CVE-2019-19608 — mitel — micollab_audio\,_web_\&_video_conferencing
A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredLis
criticalCVE-2019-19608Critical Vulnerability: CVE-2019-12165 — mitel — micollab, micollab_audio\,_web_\&_video_conferencing
MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2 (6.2.2.8), 6.1 (6.1.0.28), 6.0 (6.0.0.61), and 5.0 (5.0.5.7)
criticalCVE-2019-12165Critical Vulnerability: CVE-2018-18285 — mitel — cmg_suite
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface.
criticalCVE-2018-18285Critical Vulnerability: CVE-2018-18286 — mitel — cmg_suite
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interf
criticalCVE-2018-18286Critical Vulnerability: CVE-2018-19275 — mitel — cmg_suite, inattend
The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary
criticalCVE-2018-19275Critical Vulnerability: CVE-2018-15497 — mitel — mivoice_5330e_firmware, mivoice_5330e
The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of
criticalCVE-2018-15497Critical Vulnerability: CVE-2018-5782 — mitel — connect_onsite, st14.2
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject P
criticalCVE-2018-5782Critical Vulnerability: CVE-2018-5779 — mitel — connect_onsite, st14.2
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a m
criticalCVE-2018-5779Critical Vulnerability: CVE-2018-5780 — mitel — connect_onsite, st14.2
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject P
criticalCVE-2018-5780Critical Vulnerability: CVE-2018-5781 — mitel — connect_onsite, st14.2
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject P
criticalCVE-2018-5781
Track mitel exposure across your environment
Vulnios automatically cross-references your asset inventory against new mitel CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan