CVE-2021-26714

CRITICO 9.8CVE-2021-26714 · Published 29/03/2021 · updated 17/06/2026

In breve

CVE-2021-26714 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda micontact center enterprise (mitel).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.8% delle vulnerabilità.
Correzione: aggiornare a 9.4 o successiva.

Package	Affected versions	Patched versions
micontact center enterprise mitel	`< 9.4`	`9.4`

Description

The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access restricted files and folders due to insufficient access control. A successful exploit could allow an attacker to view and modify application data via Directory Traversal.

References

mitel.com/support/security-advisories/mitel-product-security-advisory-21-0003 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free