MI
Vendor
Mitel
220
CVEs
27
On KEV
8
New 30D
Products
MM8.5
Mitel MiVoice Office 400
Mitel
8 CVEs0 on KEV8 new
MI9.8
MiCollab
Mitel
47 CVEs4 on KEV0 new
MC9.8
MiVoice Connect
Mitel
22 CVEs3 on KEV0 new
6S8.8
6869i Sip Firmware
Mitel
4 CVEs1 on KEV0 new
6S8.1
6873i Sip Firmware
Mitel
3 CVEs1 on KEV0 new
6S8.1
6930 Sip Firmware
Mitel
3 CVEs1 on KEV0 new
6S8.1
6940 Sip Firmware
Mitel
3 CVEs1 on KEV0 new
6F8.8
6970 Firmware
Mitel
3 CVEs1 on KEV0 new
MB9.8
Mivoice Business Express
Mitel
3 CVEs1 on KEV0 new
6S7.2
6865i Sip Firmware
Mitel
2 CVEs1 on KEV0 new
6S7.2
6867i Sip Firmware
Mitel
2 CVEs1 on KEV0 new
6S7.2
6905 Sip Firmware
Mitel
2 CVEs1 on KEV0 new
6S7.2
6910 Sip Firmware
Mitel
2 CVEs1 on KEV0 new
6S7.2
6920 Sip Firmware
Mitel
2 CVEs1 on KEV0 new
6S7.2
6863i Sip Firmware
Mitel
1 CVEs1 on KEV0 new
6S7.2
6915 Sip Firmware
Mitel
1 CVEs1 on KEV0 new
6S7.2
6920w Sip Firmware
Mitel
1 CVEs1 on KEV0 new
6S7.2
6930w Sip Firmware
Mitel
1 CVEs1 on KEV0 new
6S7.2
6940w Sip Firmware
Mitel
1 CVEs1 on KEV0 new
6C7.2
6970 Conference Firmware
Mitel
1 CVEs1 on KEV0 new
MM9.8
MiCollab, MiVoice Business Express
Mitel
1 CVEs1 on KEV0 new
MI7.5
Mivoice
Mitel
1 CVEs1 on KEV0 new
SP7.2
SIP Phones
Mitel
1 CVEs1 on KEV0 new
MC9.1
Micontact Center Business
Mitel
11 CVEs0 on KEV0 new
CO9.8
Connect Onsite
Mitel
7 CVEs0 on KEV0 new
MA9.8
Micollab Audio, Web & Video Conferencing
Mitel
6 CVEs0 on KEV0 new
ST9.8
St14.2
Mitel
6 CVEs0 on KEV0 new
MM9.6
Micloud Management Portal
Mitel
4 CVEs0 on KEV0 new
S16.5
ST 14.2
Mitel
4 CVEs0 on KEV0 new
CS9.8
Cmg Suite
Mitel
3 CVEs0 on KEV0 new
MB9.8
Mivoice Business Solution Virtual Instance
Mitel
3 CVEs0 on KEV0 new
MO9.8
Mivoice Office 400
Mitel
3 CVEs0 on KEV0 new
6F8.8
6905 Firmware
Mitel
2 CVEs0 on KEV0 new
6F8.8
6910 Firmware
Mitel
2 CVEs0 on KEV0 new
6F7.5
6920 Firmware
Mitel
2 CVEs0 on KEV0 new
6F7.5
6930 Firmware
Mitel
2 CVEs0 on KEV0 new
6F7.5
6940 Firmware
Mitel
2 CVEs0 on KEV0 new
BE8.8
Businesscti Enterprise
Mitel
2 CVEs0 on KEV0 new
MC9.8
Mivoice Connect Client
Mitel
2 CVEs0 on KEV0 new
MM9.4
Mivoice Mx-one
Mitel
2 CVEs0 on KEV0 new
MO9.8
Mivoice Office 400 Smb Controller Firmware
Mitel
2 CVEs0 on KEV0 new
UO9.8
Unify Openscape Xpressions Webassistant
Mitel
2 CVEs0 on KEV0 new
6F7.5
6863 Firmware
Mitel
1 CVEs0 on KEV0 new
6F5.9
6863i Firmware
Mitel
1 CVEs0 on KEV0 new
6F7.5
6865 Firmware
Mitel
1 CVEs0 on KEV0 new
6F5.9
6865i Firmware
Mitel
1 CVEs0 on KEV0 new
6F7.5
6867 Firmware
Mitel
1 CVEs0 on KEV0 new
6F5.9
6867i Firmware
Mitel
1 CVEs0 on KEV0 new
6F7.5
6869 Firmware
Mitel
1 CVEs0 on KEV0 new
6F5.9
6869i Firmware
Mitel
1 CVEs0 on KEV0 new
6F7.5
6873 Firmware
Mitel
1 CVEs0 on KEV0 new
6F5.9
6873i Firmware
Mitel
1 CVEs0 on KEV0 new
6F8.8
6915 Firmware
Mitel
1 CVEs0 on KEV0 new
6F8.8
6920w Firmware
Mitel
1 CVEs0 on KEV0 new
6F8.8
6930w Firmware
Mitel
1 CVEs0 on KEV0 new
6F8.8
6940w Firmware
Mitel
1 CVEs0 on KEV0 new
7D8.8
700d Dect Firmware
Mitel
1 CVEs0 on KEV0 new
CM4.3
Connect Mobility Router
Mitel
1 CVEs0 on KEV0 new
CX8.2
CX
Mitel
1 CVEs0 on KEV0 new
IN9.8
Inattend
Mitel
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104811 | MM Mitel MiVoice Office 400 Mitel | 8.4 | Oct 5 | Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution |
| CVE-2026-104810 | MM Mitel MiVoice Office 400 Mitel | 8.4 | Oct 5 | Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability |
| CVE-2026-104809 | MM Mitel MiVoice Office 400 Mitel | 8.4 | Oct 5 | Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution |
| CVE-2026-104808 | MM Mitel MiVoice Office 400 Mitel | 1.9 | Oct 5 | Mitel MiVoice Office 400 stored Cross-Site Scripting |
| CVE-2026-104807 | MM Mitel MiVoice Office 400 Mitel | 1.9 | Oct 5 | Mitel MiVoice Office 400 stored Cross-Site Scripting |
| CVE-2026-104806 | MM Mitel MiVoice Office 400 Mitel | 5.5 | Oct 5 | Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure |
| CVE-2026-104805 | MM Mitel MiVoice Office 400 Mitel | 8.5 | Oct 5 | Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution |
| CVE-2026-104706 | MM Mitel MiVoice Office 400 Mitel | 8.4 | Oct 5 | Mitel MiVoice Office 400 view system files path traversal |
| CVE-2025-67823 | MC Micontact Center Business Mitel | 8.2 | Jan 15 | A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to… |
| CVE-2025-67822 | MM Mivoice Mx-one Mitel | 9.4 | Jan 15 | A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an… |
| CVE-2025-52914 | MI Micollab Mitel | 8.8 | Aug 8 | A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection… |
| CVE-2024-55550 RansomwareIn wildKEV | MI Micollab Mitel | 2.7 | Dec 10 | Mitel MiCollab Path Traversal Vulnerability |
| CVE-2024-47224 | MI Micollab Mitel | 6.5 | Oct 21 | A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a… |
| CVE-2024-41714 | MI Micollab Mitel | 8.8 | Oct 21 | A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow… |
| CVE-2024-41712 | MI Micollab Mitel | 6.6 | Oct 21 | A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a command injection attack, due to… |
| CVE-2024-35315 | MI Micollab Mitel | 5.6 | Oct 21 | A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an authenticated… |
| CVE-2024-35314 | MI Micollab Mitel | 9.8 | Oct 21 | A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an unauthenticated… |
| CVE-2024-35287 | MI Micollab Mitel | 6.7 | Oct 21 | A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allow an authenticated attacker with administrative privilege to… |
| CVE-2024-35286 | MI Micollab Mitel | 9.8 | Oct 21 | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization… |
| CVE-2024-35285 | MI Micollab Mitel | 9.8 | Oct 21 | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a command injection attack due to insufficient… |
| CVE-2024-30160 | MI Micollab Mitel | 4.8 | Oct 21 | A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a… |
| CVE-2024-30159 | MI Micollab Mitel | 4.8 | Oct 21 | A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored… |
| CVE-2024-30158 | MI Micollab Mitel | 7.2 | Oct 21 | A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL… |
| CVE-2024-30157 | MI Micollab Mitel | 7.2 | Oct 21 | A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a… |
| CVE-2024-47912 | MI Micollab Mitel | 8.2 | Oct 21 | A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to perform… |
| CVE-2024-47223 | MI Micollab Mitel | 9.4 | Oct 21 | A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL… |
| CVE-2024-47189 | MI Micollab Mitel | 7.7 | Oct 21 | The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL… |
| CVE-2024-41713 RansomwareIn wildKEV | MI Micollab Mitel | 9.1 | Oct 21 | Mitel MiCollab Path Traversal Vulnerability |
| CVE-2024-42514 | MC Micontact Center Business Mitel | 8.1 | Oct 1 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack… |
| CVE-2024-36446 | MM Mivoice Mx-one Mitel | 8.8 | Aug 13 | The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due to improper access… |
| CVE-2024-41710 In wildKEV | 6S 6873i Sip Firmware Mitel | 7.2 | Aug 12 | Mitel SIP Phones Argument Injection Vulnerability |
| CVE-2024-37570 | 6S 6869i Sip Firmware Mitel | 8.8 | Jun 9 | On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (sent by an authenticated user)… |
| CVE-2024-37569 | 6S 6869i Sip Firmware Mitel | 8.8 | Jun 9 | An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices |
| CVE-2024-35284 | MC Micontact Center Business Mitel | 5.4 | May 29 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site… |
| CVE-2024-35283 | MC Micontact Center Business Mitel | 6.1 | May 29 | A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a stored cross-site scripting (XSS)… |
| CVE-2024-28066 | OD Openscape Dect Firmware Mitel | 8.8 | Apr 8 | In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password) |
| CVE-2024-28070 | MC Micontact Center Business Mitel | 6.8 | Mar 16 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site… |
| CVE-2024-28069 | MC Micontact Center Business Mitel | 7.5 | Mar 16 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct an information disclosure… |
| CVE-2023-40266 | UO Unify Openscape Xpressions Webassistant Mitel | 9.8 | Feb 8 | An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911 |
| CVE-2023-40265 | UO Unify Openscape Xpressions Webassistant Mitel | 8.8 | Feb 8 | An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911 |
| CVE-2023-39286 | CM Connect Mobility Router Mitel | 4.3 | Sep 14 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request… |
| CVE-2023-39285 | MC Mivoice Connect Mitel | 4.3 | Sep 14 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request… |
| CVE-2023-39291 | MC Mivoice Connect Mitel | 4.9 | Aug 25 | A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an… |
| CVE-2023-39290 | MC Mivoice Connect Mitel | 4.9 | Aug 25 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct… |
| CVE-2023-39289 | MC Mivoice Connect Mitel | 7.5 | Aug 25 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration… |
| CVE-2023-39288 | MC Mivoice Connect Mitel | 5.5 | Aug 25 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal… |
| CVE-2023-39287 | MC Mivoice Connect Mitel | 5.5 | Aug 25 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal… |
| CVE-2023-39293 | MO Mivoice Office 400 Mitel | 9.8 | Aug 14 | A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands… |
| CVE-2023-39292 | MO Mivoice Office 400 Mitel | 9.8 | Aug 14 | A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and… |
| CVE-2023-32748 | MC Mivoice Connect Mitel | 9.8 | Aug 14 | The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary… |
| CVE-2023-31458 | MC Mivoice Connect Mitel | 9.8 | May 24 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network… |
| CVE-2023-25599 | MC Mivoice Connect Mitel | 7.4 | May 24 | A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site… |
| CVE-2023-31460 | MC Mivoice Connect Mitel | 7.2 | May 24 | A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to… |
| CVE-2023-31459 | MC Mivoice Connect Mitel | 8.8 | May 24 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network… |
| CVE-2023-31457 | MC Mivoice Connect Mitel | 9.8 | May 24 | A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal… |
| CVE-2023-25598 | MC Mivoice Connect Mitel | 6.1 | May 24 | A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to… |
| CVE-2023-25597 | MI Micollab Mitel | 5.9 | Apr 14 | A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request -… |
| CVE-2023-22854 | MC Micontact Center Business Mitel | 7.5 | Feb 13 | The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient… |
| CVE-2022-41326 | MI Micollab Mitel | 9.8 | Nov 22 | The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls |
| CVE-2022-41223 RansomwareIn wildKEV | MC Mivoice Connect Mitel | 6.8 | Nov 22 | Mitel MiVoice Connect Code Injection Vulnerability |