Vulnerability Monitor

The vendors, products, and vulnerabilities you care about
micollab Vendor: mitel

About This Product

micollab is a software product offered by mitel. This product is widely deployed in production environments, making vulnerability monitoring essential for organizations relying on it. Security vulnerabilities in products of this category can affect system availability, data confidentiality, and integrity across entire networks. The moderate vulnerability count reflects ongoing security research and responsible disclosure practices. Regular assessment of known vulnerabilities and timely patching are fundamental components of responsible system administration for any deployment of this software.

Vulnerability Landscape Summary

SecUtils has identified 48 known vulnerabilities affecting mitel micollab. This includes 11 critical-severity issues and 11 high-severity issues that warrant immediate attention. Vulnerabilities in this product have been disclosed spanning from 2014 to 2025, indicating a sustained research interest and ongoing security attention. 24 medium-severity issues and 2 low-severity issues complete the vulnerability landscape. Organizations should prioritize patching based on deployment context, asset criticality, and exploitation likelihood rather than severity alone.

Known Vulnerabilities
ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2014-0160 2014-04-07 2025-10-22 7.5 5.0 Likely
CVE-2018-3639 2018-05-22 2024-11-21 5.5 2.1 Unknown
CVE-2019-12165 2019-05-29 2024-11-21 9.8 10.0 Likely
CVE-2018-18819 2019-11-12 2024-11-21 5.3 5.0 Likely
CVE-2019-19370 2020-03-02 2024-11-21 6.1 4.3 Likely
CVE-2020-13767 2020-08-26 2024-11-21 5.9 4.3 Likely
CVE-2020-13863 2020-08-26 2024-11-21 8.1 5.5 Likely
CVE-2020-25606 2020-12-18 2024-11-21 6.1 4.3 Likely
CVE-2020-25608 2020-12-18 2024-11-21 7.2 6.5 Likely
CVE-2020-25609 2020-12-18 2024-11-21 5.4 3.5 Unknown
CVE-2020-25610 2020-12-18 2024-11-21 5.3 5.0 Likely
CVE-2020-25611 2020-12-18 2024-11-21 6.1 4.3 Likely
CVE-2020-25612 2020-12-18 2024-11-21 4.9 4.0 Likely
CVE-2020-27340 2020-12-18 2024-11-21 6.1 5.8 Likely
CVE-2020-35547 2021-01-29 2024-11-21 9.1 6.4 Likely
CVE-2021-27401 2021-08-13 2024-11-21 6.1 4.3 Likely
CVE-2021-27402 2021-08-13 2024-11-21 6.5 6.4 Likely
CVE-2021-32067 2021-08-13 2024-11-21 6.5 6.4 Likely
CVE-2021-32068 2021-08-13 2024-11-21 3.7 4.3 Likely
CVE-2021-32069 2021-08-13 2024-11-21 4.8 5.8 Likely
CVE-2021-32070 2021-08-13 2024-11-21 5.4 5.8 Likely
CVE-2021-32071 2021-08-13 2024-11-21 9.8 7.5 Likely
CVE-2021-32072 2021-08-13 2024-11-21 6.5 4.0 Likely
CVE-2022-26143 2022-03-10 2025-11-03 9.8 9.0 Likely
CVE-2022-36451 2022-10-25 2025-05-07 8.8 - -
CVE-2022-36453 2022-10-25 2025-05-07 8.8 - -
CVE-2022-36454 2022-10-25 2025-05-07 6.5 - -
CVE-2022-36452 2022-10-25 2025-05-07 9.8 - -
CVE-2022-41326 2022-11-22 2025-04-29 9.8 - -
CVE-2023-25597 2023-04-14 2025-02-07 5.9 - -
CVE-2024-47189 2024-10-21 2025-07-07 7.7 - -
CVE-2024-47223 2024-10-21 2025-07-07 9.4 - -
CVE-2024-47912 2024-10-21 2025-07-07 8.2 - -
CVE-2024-30157 2024-10-21 2024-11-21 7.2 - -
CVE-2024-30158 2024-10-21 2024-10-25 7.2 - -
CVE-2024-30159 2024-10-21 2025-03-22 4.8 - -
CVE-2024-30160 2024-10-21 2025-03-22 4.8 - -
CVE-2024-35285 2024-10-21 2025-07-07 9.8 - -
CVE-2024-35286 2024-10-21 2025-07-07 9.8 - -
CVE-2024-35287 2024-10-21 2025-07-07 6.7 - -
CVE-2024-35314 2024-10-21 2025-07-07 9.8 - -
CVE-2024-35315 2024-10-21 2025-07-07 5.6 - -
CVE-2024-41712 2024-10-21 2025-06-24 6.6 - -
CVE-2024-41713 2024-10-21 2025-11-04 9.1 - -
CVE-2024-41714 2024-10-21 2025-06-24 8.8 - -
CVE-2024-47224 2024-10-21 2025-06-24 6.5 - -
CVE-2024-55550 2024-12-10 2025-11-04 2.7 - -
CVE-2025-52914 2025-08-08 2025-08-08 8.8 - -

How SecUtils Interprets Product Data

SecUtils normalizes and enriches National Vulnerability Database (NVD) records for mitel micollab by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and structuring the data for rapid analysis and asset correlation. For every vulnerability listed, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference information to enable organizations to prioritize patching and risk assessment efficiently. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for vulnerability management and security operations.