CVE-2021-32070

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking attack due to an insecure header response. A successful exploit could allow an attacker to modify the browser header and redirect users...

CVE-2021-32067

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP response due to insufficient output sanitization...

CVE-2021-32072

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information disclosing sensitive application data due to insufficient output sanitization. A successful exploit could allow an attacker to view source code methods...

CVE-2021-32072

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information disclosing sensitive application data due to insufficient output sanitization. A successful exploit could allow an attacker to view source code methods...

CVE-2021-32070: Improper Restriction of Rendered UI Layers or Frames

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking attack due to an insecure header response. A successful exploit could allow an attacker to modify the browser header and redirect users...

CVE-2021-32072: Improper Encoding or Escaping of Output

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information disclosing sensitive application data due to insufficient output sanitization. A successful exploit could allow an attacker to view source code methods...

CVE-2021-32067: Improper Encoding or Escaping of Output

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP response due to insufficient output sanitization...

CVE-2021-32068: Allocation of Resources Without Limits or Throttling

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify applicatio...

PT-2021-19647

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions prior to 9.3 Description: The issue allows an attacker to view sensitive system information through an HTTP response due to insufficient output sanitization in the MiCollab Client Service component. Recommendations: Fo...

PT-2021-19651

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions prior to 9.3 Description: The issue is related to improper access control in the MiCollab Client service, allowing an unauthenticated user to gain system access. A successful exploit could allow an attacker to view and...