Filtered by vendor Mitel Subscriptions
Filtered by product Micontact Center Business Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-22854 1 Mitel 1 Micontact Center Business 2024-11-21 7.5 High
The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information.
CVE-2021-3352 1 Mitel 1 Micontact Center Business 2024-11-21 9.1 Critical
The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view and modify) user data without authorization due to improper handling of tokens.
CVE-2020-9379 1 Mitel 1 Micontact Center Business 2024-11-21 6.5 Medium
The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conversations.
CVE-2020-24693 1 Mitel 1 Micontact Center Business 2024-11-21 3.3 Low
The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization.
CVE-2020-24692 1 Mitel 1 Micontact Center Business 2024-11-21 7.1 High
The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.
CVE-2024-42514 1 Mitel 1 Micontact Center Business 2024-10-07 8.1 High
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to access sensitive information and send unauthorized messages during an active chat session.