mitel vulnerabilities

Recent CVEs affecting mitel products. 30 tracked.

mitel has 30 tracked vulnerabilities, 7 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 29. Most recent: 2026-01-15. Highest priority: CVE-2024-41713 (score 100/100).

CVE-2024-55550 LOW 2.7 EXPLOITED UPGRADE Mitel MiCollab Path Traversal Vulnerability
CVE-2024-41713 CRITICAL 9.1 EXPLOITED UPGRADE Mitel MiCollab Path Traversal Vulnerability
CVE-2025-67823 HIGH 8.2 UPGRADE UPGRADE A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mit
CVE-2025-67822 CRITICAL 9.4 UPGRADE A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1
CVE-2025-52914 HIGH 8.8 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.10
CVE-2024-47912 HIGH 8.2 UPGRADE A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP
CVE-2024-47224 MEDIUM 6.5 UPGRADE A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2
CVE-2024-47223 CRITICAL 9.4 UPGRADE A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2
CVE-2024-47189 HIGH 7.7 UPGRADE The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 F
CVE-2024-42514 HIGH 8.1 UPGRADE A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow a
CVE-2024-41714 HIGH 8.8 UPGRADE UPGRADE A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Busines
CVE-2024-41712 MEDIUM 6.6 UPGRADE A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticat
CVE-2024-41710 HIGH 7.2 EXPLOITED UPGRADE UPGRADE Mitel SIP Phones Argument Injection Vulnerability
CVE-2024-37570 HIGH 8.8 MITIGATE On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization
CVE-2024-37569 HIGH 8.8 UPGRADE An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices
CVE-2024-36446 HIGH 8.8 UPGRADE The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attack
CVE-2024-35315 MEDIUM 5.6 UPGRADE DOWNGRADE A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtu
CVE-2024-35314 CRITICAL 9.8 UPGRADE DOWNGRADE A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtu
CVE-2024-35287 MEDIUM 6.7 UPGRADE A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) c
CVE-2024-35286 CRITICAL 9.8 UPGRADE A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attack
CVE-2024-35285 CRITICAL 9.8 UPGRADE A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attack
CVE-2024-35284 MEDIUM 5.4 UPGRADE A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow a
CVE-2024-35283 MEDIUM 6.1 UPGRADE A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an una
CVE-2024-30160 MEDIUM 4.8 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow a
CVE-2024-30159 MEDIUM 4.8 UPGRADE A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authentic
CVE-2024-30158 HIGH 7.2 UPGRADE A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authentic
CVE-2024-30157 HIGH 7.2 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow a
CVE-2024-28066 HIGH 8.8 UPGRADE UPGRADE In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
CVE-2023-40266 CRITICAL 9.8 UPGRADE An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911
CVE-2023-40265 HIGH 8.8 UPGRADE An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911

FAQ

How do I fix mitel vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mitel being exploited right now?

Yes: 3 mitel CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which mitel CVE should I patch first?

CVE-2024-41713 currently ranks highest (100/100): Mitel MiCollab Path Traversal Vulnerability.

Products

RSS feed for mitel · ← Back to latest CVEs