CVE-2021-3352: Mitel Micontact Center Business

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view and modify) user data without authorization due to improper handling of tokens.

Affected products

• Mitel Micontact Center Business: from 8.0.0.0, up to and including 8.1.4.1; from 9.0.0.0, up to and including 9.3.1.0

Published 2021-08-13. Last modified 2026-06-17.