mitel micontact center business

Name: mitel micontact center business
Brand: mitel

productUS

cpe:2.3:a:mitel:micontact_center_business:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical2high1medium1low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3352US	critical9.1OT elevated	1.04% (64th)	—	no fix	2021-08-13	2 versions
CVE-2020-9379US	medium6.5	0.92% (60th)	—	no fix	2020-02-25	8.0 → 9.0.1.0
CVE-2023-22854US	high7.5	0.60% (49th)	—	9.4.2.0	2023-02-13	9.2.2.0 → 9.4.2.0
CVE-2024-28069US	—	0.57% (47th)	—	no fix	2024-03-16	≤ 10.0.0.4
CVE-2024-28070US	—	0.45% (39th)	—	no fix	2024-03-16	≤ 10.0.0.4
CVE-2024-42514US	—	0.45% (39th)	—	no fix	2024-10-01	≤ 10.1.0.4
CVE-2020-24692US	high7.1	0.42% (36th)	—	9.3.0.0	2020-09-25	< 9.3.0.0
CVE-2025-67823US	—	0.33% (26th)	—	10.2.0.11	2026-01-15	< 10.2.0.11
CVE-2020-24693US	low3.3	0.27% (20th)	—	9.3.0.0	2020-12-18	< 9.3.0.0
CVE-2024-35283US	—	0.26% (18th)	—	no fix	2024-05-29	≤ 10.0.0.4
CVE-2024-35284US	—	0.25% (17th)	—	no fix	2024-05-29	≤ 10.0.0.4

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-345Insufficient Verification of Data Authenticity1 CVEs
CWE-839Numeric Range Comparison Without Minimum Check1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.