2
CVEs
1
Critical
1
High
0
KEV
0
PoC
2
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
1
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Micollab
45
Mivoice Connect
23
PHP
12
Micontact Center Business
11
Connect Onsite
7
Micloud Management Portal
5
6869I Sip Firmware
4
St 14 2
4
St14 2
4
Node.js
4
6930 Sip Firmware
3
Mivoice Office 400
3
Mivoice Business Solution Virtual Instance
3
6873I Sip Firmware
3
6970 Firmware
3
Micollab Audio Web Video Conferencing
3
6940 Sip Firmware
3
Enterprise Linux Desktop
2
Enterprise Linux Workstation
2
Businesscti Enterprise
2
6867I Sip Firmware
2
Debian Linux
2
Mivoice Mx One
2
Enterprise Linux Server Aus
2
Enterprise Linux Server Tus
2
6910 Sip Firmware
2
Virtualization
2
Mivoice Connect Client
2
Enterprise Linux Server
2
Mivoice Business
2
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-67822 | Mitel MiVoice MX-ONE 7.3-7.8 SP1 has authentication bypass in the Provisioning Manager. Unauthenticated attackers can access user or admin accounts in the VoIP management system. | CRITICAL | 9.4 | 0.1% | 47 |
No patch
|
| CVE-2025-67823 | A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.0% | 41 |
No patch
|