CVE-2021-3176

8.0 highEPSS 0.9%

High (8.0) in mitel businesscti enterprise. EPSS 0.9% chance of exploitation in the next 30 days.

The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2021-01-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mitel:businesscti_enterprise

References

https://www.mitel.com/support/security-advisories
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001
https://www.mitel.com/support/security-advisories
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001

Check your stack JSON