[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIVUJapy5Xo6bBSHKNhPN_7F5zLWJrqx6oQzW3TFcui8":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":451,"kevVulnerabilities":512,"topProductsByCves":552,"seoMetadata":563,"meta":572},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":450},20035,"mitel",129,121,8,327,"2025-08-08","m",[16,22,29,36,41,47,52,57,61,65,68,71,74,78,82,85,89,92,95,99,102,105,108,112,115,118,121,124,127,130,133,137,140,143,146,149,153,156,159,162,165,169,172,176,179,182,185,189,193,196,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,294,298,301,304,308,312,315,319,322,326,329,332,335,340,343,346,350,354,357,361,365,368,371,374,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,441,444,447],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},110929,"micollab",57,37,4,{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},110949,"mivoice_connect",32,25,3,"2023-09-14",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},110931,"micontact_center_business",35,10,0,"2024-10-01",{"id":37,"product_name":38,"version_count":21,"cve_count":39,"kev_count":34,"last_cve_update":40},110925,"connect_onsite",7,"2019-03-06",{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":34,"last_cve_update":46},110930,"micollab_audio\\,_web_\\&_video_conferencing",18,6,"2020-08-26",{"id":48,"product_name":49,"version_count":50,"cve_count":45,"kev_count":34,"last_cve_update":51},110978,"st14.2",1,"2018-03-14",{"id":53,"product_name":54,"version_count":27,"cve_count":55,"kev_count":34,"last_cve_update":56},110928,"micloud_management_portal",5,"2020-09-25",{"id":58,"product_name":59,"version_count":50,"cve_count":21,"kev_count":34,"last_cve_update":60},110977,"st_14.2","2018-04-25",{"id":62,"product_name":63,"version_count":34,"cve_count":21,"kev_count":50,"last_cve_update":64},110904,"6930_sip","2024-08-12",{"id":66,"product_name":67,"version_count":34,"cve_count":21,"kev_count":50,"last_cve_update":64},110912,"6940_sip",{"id":69,"product_name":70,"version_count":11,"cve_count":21,"kev_count":50,"last_cve_update":64},110875,"6869i_sip_firmware",{"id":72,"product_name":73,"version_count":34,"cve_count":21,"kev_count":50,"last_cve_update":64},110874,"6869i_sip",{"id":75,"product_name":76,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":77},110902,"6930","2022-05-13",{"id":79,"product_name":80,"version_count":50,"cve_count":27,"kev_count":34,"last_cve_update":81},110923,"cmg_suite","2019-04-25",{"id":83,"product_name":84,"version_count":39,"cve_count":27,"kev_count":50,"last_cve_update":64},110913,"6940_sip_firmware",{"id":86,"product_name":87,"version_count":27,"cve_count":27,"kev_count":34,"last_cve_update":88},110952,"mivoice_office_400","2023-08-14",{"id":90,"product_name":91,"version_count":34,"cve_count":27,"kev_count":50,"last_cve_update":64},110880,"6873i_sip",{"id":93,"product_name":94,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":77},110894,"6920",{"id":96,"product_name":97,"version_count":39,"cve_count":27,"kev_count":50,"last_cve_update":98},110947,"mivoice_business_express","2022-06-17",{"id":100,"product_name":101,"version_count":39,"cve_count":27,"kev_count":50,"last_cve_update":64},110881,"6873i_sip_firmware",{"id":103,"product_name":104,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":77},110910,"6940",{"id":106,"product_name":107,"version_count":39,"cve_count":27,"kev_count":50,"last_cve_update":64},110905,"6930_sip_firmware",{"id":109,"product_name":110,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110896,"6920_sip",2,{"id":113,"product_name":114,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110897,"6920_sip_firmware",{"id":116,"product_name":117,"version_count":21,"cve_count":111,"kev_count":50,"last_cve_update":64},110863,"6865i_sip_firmware",{"id":119,"product_name":120,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110868,"6867i_sip",{"id":122,"product_name":123,"version_count":55,"cve_count":111,"kev_count":50,"last_cve_update":64},110869,"6867i_sip_firmware",{"id":125,"product_name":126,"version_count":27,"cve_count":111,"kev_count":34,"last_cve_update":46},110903,"6930_firmware",{"id":128,"product_name":129,"version_count":34,"cve_count":111,"kev_count":34,"last_cve_update":88},110953,"mivoice_office_400_smb_controller",{"id":131,"product_name":132,"version_count":27,"cve_count":111,"kev_count":34,"last_cve_update":46},110911,"6940_firmware",{"id":134,"product_name":135,"version_count":111,"cve_count":111,"kev_count":34,"last_cve_update":136},110950,"mivoice_connect_client","2020-04-17",{"id":138,"product_name":139,"version_count":34,"cve_count":111,"kev_count":34,"last_cve_update":77},110882,"6905",{"id":141,"product_name":142,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110918,"6970",{"id":144,"product_name":145,"version_count":21,"cve_count":111,"kev_count":50,"last_cve_update":64},110919,"6970_firmware",{"id":147,"product_name":148,"version_count":34,"cve_count":111,"kev_count":34,"last_cve_update":98},110945,"mivoice_business",{"id":150,"product_name":151,"version_count":33,"cve_count":111,"kev_count":34,"last_cve_update":152},110922,"businesscti_enterprise","2021-01-29",{"id":154,"product_name":155,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110884,"6905_sip",{"id":157,"product_name":158,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110885,"6905_sip_firmware",{"id":160,"product_name":161,"version_count":34,"cve_count":111,"kev_count":34,"last_cve_update":77},110886,"6910",{"id":163,"product_name":164,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110888,"6910_sip",{"id":166,"product_name":167,"version_count":34,"cve_count":111,"kev_count":34,"last_cve_update":168},110934,"mitel_3300_integrated_communication_platform","2005-02-28",{"id":170,"product_name":171,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110889,"6910_sip_firmware",{"id":173,"product_name":174,"version_count":111,"cve_count":111,"kev_count":34,"last_cve_update":175},110980,"unify_openscape_xpressions_webassistant","2024-02-08",{"id":177,"product_name":178,"version_count":34,"cve_count":111,"kev_count":50,"last_cve_update":64},110862,"6865i_sip",{"id":180,"product_name":181,"version_count":50,"cve_count":111,"kev_count":34,"last_cve_update":88},110954,"mivoice_office_400_smb_controller_firmware",{"id":183,"product_name":184,"version_count":27,"cve_count":111,"kev_count":34,"last_cve_update":46},110895,"6920_firmware",{"id":186,"product_name":187,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":188},110944,"mivoice_border_gateway","2018-05-22",{"id":190,"product_name":191,"version_count":111,"cve_count":50,"kev_count":34,"last_cve_update":192},110932,"micontact_center_enterprise","2021-03-29",{"id":194,"product_name":195,"version_count":55,"cve_count":50,"kev_count":34,"last_cve_update":46},110853,"6863_firmware",{"id":197,"product_name":198,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":199},110854,"6863i","2020-03-02",{"id":201,"product_name":202,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":199},110855,"6863i_firmware",{"id":204,"product_name":205,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110856,"6863i_sip",{"id":207,"product_name":208,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110857,"6863i_sip_firmware",{"id":210,"product_name":211,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":46},110858,"6865",{"id":213,"product_name":214,"version_count":55,"cve_count":50,"kev_count":34,"last_cve_update":46},110859,"6865_firmware",{"id":216,"product_name":217,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":199},110860,"6865i",{"id":219,"product_name":220,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":199},110861,"6865i_firmware",{"id":222,"product_name":223,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":46},110864,"6867",{"id":225,"product_name":226,"version_count":55,"cve_count":50,"kev_count":34,"last_cve_update":46},110865,"6867_firmware",{"id":228,"product_name":229,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":199},110866,"6867i",{"id":231,"product_name":232,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":199},110867,"6867i_firmware",{"id":234,"product_name":235,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":46},110870,"6869",{"id":237,"product_name":238,"version_count":55,"cve_count":50,"kev_count":34,"last_cve_update":46},110871,"6869_firmware",{"id":240,"product_name":241,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":199},110872,"6869i",{"id":243,"product_name":244,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":199},110873,"6869i_firmware",{"id":246,"product_name":247,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":46},110876,"6873",{"id":249,"product_name":250,"version_count":55,"cve_count":50,"kev_count":34,"last_cve_update":46},110877,"6873_firmware",{"id":252,"product_name":253,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":199},110878,"6873i",{"id":255,"product_name":256,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":199},110879,"6873i_firmware",{"id":258,"product_name":259,"version_count":21,"cve_count":50,"kev_count":34,"last_cve_update":46},110883,"6905_firmware",{"id":261,"product_name":262,"version_count":21,"cve_count":50,"kev_count":34,"last_cve_update":46},110887,"6910_firmware",{"id":264,"product_name":265,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110892,"6915_sip",{"id":267,"product_name":268,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110893,"6915_sip_firmware",{"id":270,"product_name":271,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110900,"6920w_sip",{"id":273,"product_name":274,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110901,"6920w_sip_firmware",{"id":276,"product_name":277,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110908,"6930w_sip",{"id":279,"product_name":280,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110909,"6930w_sip_firmware",{"id":282,"product_name":283,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110916,"6940w_sip",{"id":285,"product_name":286,"version_count":34,"cve_count":50,"kev_count":50,"last_cve_update":64},110917,"6940w_sip_firmware",{"id":288,"product_name":289,"version_count":111,"cve_count":50,"kev_count":34,"last_cve_update":28},110924,"connect_mobility_router",{"id":291,"product_name":292,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":293},110926,"inattend","2019-04-02",{"id":295,"product_name":296,"version_count":111,"cve_count":50,"kev_count":34,"last_cve_update":297},110927,"interaction_recording","2021-08-13",{"id":299,"product_name":300,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":46},110852,"6863",{"id":302,"product_name":303,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":77},110933,"minet_firmware",{"id":305,"product_name":306,"version_count":111,"cve_count":50,"kev_count":34,"last_cve_update":307},110935,"mitel_nupoint_messenger","2009-05-07",{"id":309,"product_name":310,"version_count":55,"cve_count":50,"kev_count":50,"last_cve_update":311},110936,"mivoice","2014-04-07",{"id":313,"product_name":314,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":188},110937,"mivoice_5000",{"id":316,"product_name":317,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":318},110938,"mivoice_5330e","2018-10-23",{"id":320,"product_name":321,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":318},110939,"mivoice_5330e_firmware",{"id":323,"product_name":324,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":325},110940,"mivoice_6930","2020-12-18",{"id":327,"product_name":328,"version_count":111,"cve_count":50,"kev_count":34,"last_cve_update":325},110941,"mivoice_6930_firmware",{"id":330,"product_name":331,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":325},110942,"mivoice_6940",{"id":333,"product_name":334,"version_count":111,"cve_count":50,"kev_count":34,"last_cve_update":325},110943,"mivoice_6940_firmware",{"id":336,"product_name":337,"version_count":338,"cve_count":50,"kev_count":34,"last_cve_update":339},110951,"mivoice_mx-one",9,"2024-08-13",{"id":341,"product_name":342,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":188},110955,"mivoic_mx-one",{"id":344,"product_name":345,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":188},110956,"open_integration_gateway",{"id":347,"product_name":348,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":349},110969,"shoretel","2020-11-09",{"id":351,"product_name":352,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":353},110970,"shoretel_conference_web","2020-05-07",{"id":355,"product_name":356,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":349},110971,"shoretel_firmware",{"id":358,"product_name":359,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":360},110973,"shortel_mobility_client","2018-07-13",{"id":362,"product_name":363,"version_count":34,"cve_count":50,"kev_count":34,"last_cve_update":364},110974,"sip-dect","2020-01-13",{"id":366,"product_name":367,"version_count":111,"cve_count":50,"kev_count":34,"last_cve_update":364},110975,"sip-dect_firmware",{"id":369,"product_name":370,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":318},110976,"st",{"id":372,"product_name":373,"version_count":50,"cve_count":50,"kev_count":34,"last_cve_update":318},110979,"st_firmware",{"id":375,"product_name":376,"version_count":50,"cve_count":34,"kev_count":34,"last_cve_update":377},110972,"shoretel_mobility_client",null,{"id":379,"product_name":380,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110957,"openscape_cp110",{"id":382,"product_name":383,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110958,"openscape_cp110_firmware",{"id":385,"product_name":386,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110959,"openscape_cp210",{"id":388,"product_name":389,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110960,"openscape_cp210_firmware",{"id":391,"product_name":392,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110961,"openscape_cp410",{"id":394,"product_name":395,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110962,"openscape_cp410_firmware",{"id":397,"product_name":398,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110963,"openscape_cp710",{"id":400,"product_name":401,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110964,"openscape_cp710_firmware",{"id":403,"product_name":404,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110965,"openscape_cpx10",{"id":406,"product_name":407,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110966,"openscape_cpx10_firmware",{"id":409,"product_name":410,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110967,"openscape_dect",{"id":412,"product_name":413,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110968,"openscape_dect_firmware",{"id":415,"product_name":416,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110890,"6915",{"id":418,"product_name":419,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110921,"700d_dect_firmware",{"id":421,"product_name":422,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110946,"mivoice_business_console",{"id":424,"product_name":425,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110920,"700d_dect",{"id":427,"product_name":428,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110948,"mivoice_business_solution_virtual_instance",{"id":430,"product_name":431,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110915,"6940w_firmware",{"id":433,"product_name":434,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110914,"6940w",{"id":436,"product_name":437,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110898,"6920w",{"id":439,"product_name":440,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110907,"6930w_firmware",{"id":442,"product_name":443,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":377},110906,"6930w",{"id":445,"product_name":446,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110899,"6920w_firmware",{"id":448,"product_name":449,"version_count":111,"cve_count":34,"kev_count":34,"last_cve_update":377},110891,"6915_firmware","Mitel is a technology vendor with 129 tracked products and 121 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[452,459,466,472,479,484,490,495,502,507],{"cveId":453,"description":454,"publishedDate":311,"cvssScore":455,"cvssVersion":456,"severity":457,"isKev":4,"epssScore":458},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.",7.5,"v3.1","High",0.99999,{"cveId":460,"description":461,"publishedDate":462,"cvssScore":463,"cvssVersion":456,"severity":464,"isKev":4,"epssScore":465},"CVE-2024-41713","A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.","2024-10-21",9.1,"Critical",0.97209,{"cveId":467,"description":468,"publishedDate":469,"cvssScore":470,"cvssVersion":456,"severity":464,"isKev":4,"epssScore":471},"CVE-2022-26143","The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.","2022-03-10",9.8,0.87325,{"cveId":473,"description":474,"publishedDate":188,"cvssScore":475,"cvssVersion":456,"severity":476,"isKev":477,"epssScore":478},"CVE-2018-3639","Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",5.5,"Medium",false,0.60631,{"cveId":480,"description":481,"publishedDate":482,"cvssScore":470,"cvssVersion":456,"severity":464,"isKev":4,"epssScore":483},"CVE-2022-29499","The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.","2022-04-26",0.55242,{"cveId":485,"description":486,"publishedDate":487,"cvssScore":488,"cvssVersion":456,"severity":476,"isKev":477,"epssScore":489},"CVE-2020-11798","A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.","2020-06-10",5.3,0.48771,{"cveId":491,"description":492,"publishedDate":64,"cvssScore":493,"cvssVersion":456,"severity":457,"isKev":4,"epssScore":494},"CVE-2024-41710","A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.",7.2,0.41646,{"cveId":496,"description":497,"publishedDate":498,"cvssScore":499,"cvssVersion":456,"severity":500,"isKev":4,"epssScore":501},"CVE-2024-55550","Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.","2024-12-10",2.7,"Low",0.38155,{"cveId":503,"description":504,"publishedDate":51,"cvssScore":470,"cvssVersion":505,"severity":464,"isKev":477,"epssScore":506},"CVE-2018-5782","A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.","v3.0",0.1872,{"cveId":508,"description":509,"publishedDate":349,"cvssScore":510,"cvssVersion":456,"severity":476,"isKev":477,"epssScore":511},"CVE-2020-28351","The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack (via the PATH_INFO to index.php) due to insufficient validation for the time_zone object in the HOME_MEETING& page.",6.1,0.15987,[513,518,522,524,534,540,544,548],{"cveId":491,"description":492,"publishedDate":64,"cvssScore":493,"cvssVersion":456,"severity":457,"isKev":4,"epssScore":494,"cisaVulnName":514,"cisaDateAdded":515,"cisaShortDescription":516,"cisaRequiredAction":517},"Mitel SIP Phones Argument Injection Vulnerability","2025-02-12","Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":460,"description":461,"publishedDate":462,"cvssScore":463,"cvssVersion":456,"severity":464,"isKev":4,"epssScore":465,"cisaVulnName":519,"cisaDateAdded":520,"cisaShortDescription":521,"cisaRequiredAction":517},"Mitel MiCollab Path Traversal Vulnerability","2025-01-07","Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.",{"cveId":496,"description":497,"publishedDate":498,"cvssScore":499,"cvssVersion":456,"severity":500,"isKev":4,"epssScore":501,"cisaVulnName":519,"cisaDateAdded":520,"cisaShortDescription":523,"cisaRequiredAction":517},"Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.",{"cveId":525,"description":526,"publishedDate":527,"cvssScore":528,"cvssVersion":456,"severity":476,"isKev":4,"epssScore":529,"cisaVulnName":530,"cisaDateAdded":531,"cisaShortDescription":532,"cisaRequiredAction":533},"CVE-2022-41223","The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.","2022-11-22",6.8,0.10657,"Mitel MiVoice Connect Code Injection Vulnerability","2023-02-21","The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.","Apply updates per vendor instructions.",{"cveId":535,"description":536,"publishedDate":527,"cvssScore":528,"cvssVersion":456,"severity":476,"isKev":4,"epssScore":537,"cisaVulnName":538,"cisaDateAdded":531,"cisaShortDescription":539,"cisaRequiredAction":533},"CVE-2022-40765","A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.",0.10566,"Mitel MiVoice Connect Command Injection Vulnerability","The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.",{"cveId":480,"description":481,"publishedDate":482,"cvssScore":470,"cvssVersion":456,"severity":464,"isKev":4,"epssScore":483,"cisaVulnName":541,"cisaDateAdded":542,"cisaShortDescription":543,"cisaRequiredAction":533},"Mitel MiVoice Connect Data Validation Vulnerability","2022-06-27","The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.",{"cveId":453,"description":454,"publishedDate":311,"cvssScore":455,"cvssVersion":456,"severity":457,"isKev":4,"epssScore":458,"cisaVulnName":545,"cisaDateAdded":546,"cisaShortDescription":547,"cisaRequiredAction":533},"OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":467,"description":468,"publishedDate":469,"cvssScore":470,"cvssVersion":456,"severity":464,"isKev":4,"epssScore":471,"cisaVulnName":549,"cisaDateAdded":550,"cisaShortDescription":551,"cisaRequiredAction":533},"MiCollab, MiVoice Business Express Access Control Vulnerability","2022-03-25","A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.",[553,554,555,556,557,558,559,560,561,562],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},{"id":37,"product_name":38,"version_count":21,"cve_count":39,"kev_count":34,"last_cve_update":40},{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":34,"last_cve_update":46},{"id":48,"product_name":49,"version_count":50,"cve_count":45,"kev_count":34,"last_cve_update":51},{"id":53,"product_name":54,"version_count":27,"cve_count":55,"kev_count":34,"last_cve_update":56},{"id":58,"product_name":59,"version_count":50,"cve_count":21,"kev_count":34,"last_cve_update":60},{"id":62,"product_name":63,"version_count":34,"cve_count":21,"kev_count":50,"last_cve_update":64},{"id":66,"product_name":67,"version_count":34,"cve_count":21,"kev_count":50,"last_cve_update":64},{"title":564,"metaDescription":565,"keywords":566,"structuredData":567},"Mitel - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mitel covering 129 products with 121 tracked vulnerabilities including 3 critical and 2 high-severity issues and 8 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mitel vulnerabilities, Mitel security, Mitel CVE, Mitel threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Mitel KEV, Mitel exploited vulnerabilities",{"@context":568,"@type":569,"name":570,"description":565,"url":571},"https:\u002F\u002Fschema.org","Organization","Mitel","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmitel",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":573,"apiVersion":574},"2026-10-18T15:47:55.129Z","3.0"]