CVE-2021-3176: Mitel Businesscti Enterprise

High severity, CVSS 8.0. EPSS: 0.9% chance of exploitation in the next 30 days.

The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data.

Affected products

• Mitel Businesscti Enterprise: before 6.4.15 (fixed in 6.4.15); from 7.0, before 7.1.2 (fixed in 7.1.2)

Published 2021-01-29. Last modified 2026-06-17.