MC
Product
Micontact Center Business
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 4Low 1
Watch
Add Micontact Center Business to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3352 | 9.1 | Aug 13 | The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view… Affected: 8.0.0.0 through 8.1.4.1; 9.0.0.0 through 9.3.1.0 |
| CVE-2025-67823 | 8.2 | Jan 15 | A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to… Affected: before 10.2.0.11 |
| CVE-2024-42514 | 8.1 | Oct 1 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack… Affected: through 10.1.0.4 |
| CVE-2024-28069 | 7.5 | Mar 16 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct an information disclosure… Affected: through 10.0.0.4 |
| CVE-2023-22854 | 7.5 | Feb 13 | The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient… Affected: 9.2.2.0 before 9.4.2.0 |
| CVE-2020-24692 | 7.1 | Sep 25 | The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS Affected: before 9.3.0.0 |
| CVE-2024-28070 | 6.8 | Mar 16 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site… Affected: through 10.0.0.4 |
| CVE-2020-9379 | 6.5 | Feb 25 | The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive… Affected: 8.0 through 9.0.1.0 |
| CVE-2024-35283 | 6.1 | May 29 | A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a stored cross-site scripting (XSS)… Affected: through 10.0.0.4 |
| CVE-2024-35284 | 5.4 | May 29 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site… Affected: through 10.0.0.4 |
| CVE-2020-24693 | 3.3 | Dec 18 | The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization Affected: before 9.3.0.0 |
Showing 11