CVE-2008-6797: Mitel Nupoint Messenger

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

• Mitel Mitel Nupoint Messenger: version r3 only; version r11 only

Published 2009-05-07. Last modified 2026-06-16.