CVE-2022-41326

2022-11-2200:00:00

mitre

www.cve.org

mitel

micollab

web conferencing

vulnerability

unauthorized access

remote code execution

AI Score

Confidence

High

EPSS

0.004

Percentile

74.3%

JSON

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application.