HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-42514

CVSS 8.1v3.1pub. 2024-10-01upd. 2025-05-30

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to access sensitive information and send unauthorized messages during an active chat session.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

  • Mitel Micontact Center Business

    APP
    Mitel
    ≤ 10.1.0.4
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2021-3352CRITICAL9.1PL ✓same product

Auth Bypass w SDK Mitel MiContact Center Business — nieautoryzowany dostęp do danych

CVE-2025-67823HIGH8.2same product

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mit...

CVE-2024-28069HIGH7.5same product

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow a...

CVE-2023-22854HIGH7.5same product

The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthen...

CVE-2020-24692HIGH7.1same product

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitra...