CVE-2019-19607

2020-03-0217:55:30

mitre

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

61.2%

JSON

A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.