CVE-2021-32068: Mitel MiCollab

Low severity, CVSS 3.7. EPSS: 0.6% chance of exploitation in the next 30 days.

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify application data and state.

Affected products

• Mitel MiCollab: before 9.3 (fixed in 9.3)

Published 2021-08-13. Last modified 2026-06-17.