CVE-2020-13863

2020-08-2617:57:23

mitre

www.cve.org

mitel micollab

header injection

http responses

user data

input parameters

exploit

user information

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information.