Approved changes feed: RSS · Atom

cpe:2.3:a:mitel:micontact_center_business:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMitel (750d81d3-7166-5542-b6c5-c328632b06f9)
ProductMicontact Center Business (6b434db1-9047-5c37-a434-992717892352)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67823 vulnerable 2026-06-08 07:41:20.516720 Details available
A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-16T15:02:06.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42514 vulnerable 2026-06-08 06:45:46.670019 Details available
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to access sensitive information and send unauthorized messages during an active chat session.
Published: 2024-10-01T00:00:00.000Z
Updated: 2024-10-07T14:19:56.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35284 vulnerable 2026-06-08 06:37:35.853227 Details available
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation.
Published: 2024-05-29T15:52:40.256Z
Updated: 2025-03-13T17:23:25.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35283 vulnerable 2026-06-08 06:37:35.852694 Details available
A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a stored cross-site scripting (XSS) attack due to insufficient input validation.
Published: 2024-05-29T15:42:46.257Z
Updated: 2025-02-13T15:54:05.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28070 vulnerable 2026-06-08 06:33:26.383373 Details available
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit could allow an attacker to access sensitive information and gain unauthorized access.
Published: 2024-03-16T00:00:00.000Z
Updated: 2025-03-20T19:21:09.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28069 vulnerable 2026-06-08 06:33:26.382753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22854 vulnerable 2026-06-08 05:54:27.238359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3352 vulnerable 2026-06-08 05:33:51.226586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9379 vulnerable 2026-06-08 05:28:01.469777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24693 vulnerable 2026-06-08 05:22:35.351954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24692 vulnerable 2026-06-08 05:22:35.351433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.