476 matches found
CVE-2024-30157
Summary: CVE-2024-30157 affects Mitel MiCollab (Suite Applications Services component) up through version 9.7.1.110. An authenticated attacker with administrative privileges can exploit a SQL Injection due to improper input validation, potentially executing arbitrary database and management opera...
CVE-2024-41713
Mitel MiCollab’s NuPoint Unified Messaging (NPM) component is affected by CVE-2024-41713, a path-traversal vulnerability that affects MiCollab up to 9.8 SP1 FP2 (9.8.1.201). An unauthenticated attacker can read or modify data and configurations due to insufficient input validation. Connected docu...
CVE-2024-30158
CVE-2024-30158 affects Mitel MiCollab web conferencing component (versions through 9.7.1.110). The issue is due to insufficient validation of user input, enabling an authenticated attacker with administrative privileges to perform a SQL injection, potentially executing arbitrary database and mana...
CVE-2024-35287
Summary (CVE-2024-35287) : Mitel MiCollab's NuPoint Messenger component (versions through 9.8 SP1/9.8.1.5) contains a privilege-escalation flaw due to execution of a resource with unnecessary privileges, enabling an authenticated administrator to run arbitrary commands with elevated privileges. R...
CVE-2024-47224
A vulnerability in the AWV Audio, Web and Video Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a CRLF injection attack due to inadequate encoding of user input in URLs. A successful exploit could allow an attacker to perfo...
Mitel MiCollab 命令注入漏洞
Mitel MiCollab is an enterprise-grade unified communications solution that supports voice, video and messaging communications capabilities. A command injection vulnerability exists in Mitel MiCollab version 9.8.0.33, which can be exploited by an attacker to execute arbitrary system commands...
PT-2024-10183 · Mitel · Mitel Micollab
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.8 SP2 Description: Mitel MiCollab is susceptible to a local file read issue stemming from insufficient input sanitization. A successful exploit allows an authenticated attacker with administrative privileges ...
PT-2024-7463
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions 9.8 SP1 FP2 9.8.1.201 and earlier Description: A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab could allow an unauthenticated attacker to conduct a path traversal attack due to...
PT-2024-7462 · Mitel · Mitel Micollab
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions prior to 9.8 SP1 FP2 9.8.1.201 Description: A vulnerability in the AWV component of Mitel MiCollab could allow an unauthenticated attacker to conduct a CRLF injection attack due to inadequate encoding of user input in...
PT-2024-7508 · Mitel · Mitel Micollab
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions prior to 9.8 SP1 FP2 9.8.1.201 Description: A vulnerability in the AWV Conferencing component could allow an unauthenticated attacker to perform unauthorized data-access attacks due to missing authentication mechanisms...
PT-2024-7666 · Mitel · Mitel Micollab
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.8 SP1 FP2 9.8.1.201 Description: The issue is related to insufficient sanitization of user input in the AWV Audio, Web and Video Conferencing component, allowing an unauthenticated attacker to conduct a SQL...
PT-2024-7493 · Mitel · Mivoice Business Solution Virtual Instance +1
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.8 SP1 9.8.1.5 MiVoice Business Solution Virtual Instance MiVB SVI versions through 1.0.0.27 Description: A vulnerability in the Web Interface component could allow an authenticated attacker to conduct a comma...
PT-2024-7481 · Mitel · Mitel Micollab
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.8.1.5 Description: The issue is related to insufficient validation of user input in the Web Conferencing Component, allowing an authenticated attacker to conduct a command injection attack. This could enable ...
PT-2024-7482 · Mitel · Nupoint Messenger +1
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.8 SP1 9.8.1.5 Description: A vulnerability in the NuPoint Messenger component could allow an authenticated attacker with administrative privilege to conduct a privilege escalation attack due to the execution ...
The vulnerability of the MiCollab Desktop Client client of the collaborative work platform MiCollab, along with the virtual instance of the MiVoice Business Solution Virtual Instance (MiVB SVI), allows a hacker to bypass security restrictions, enhance their privileges, and execute arbitrary code.
The vulnerability of the MiCollab Desktop Client, a platform for collaborative work between MiCollab and the virtual instance of the MiVoice Business Solution Virtual Instance MiVB SVI, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent...
Mitel MiCollab <= 9.4 SP1 Information Disclosure and DoS (22-0001)
According to its version number, the Mitel MiCollab software is 9.4 SP1 9.4.107 or prior. It is, therefore, affected by the following vulnerability: - A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to...
PT-2024-4059 · Mitel · Mivoice Business Solution Virtual Instance +1
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions 9.7.1.110 and earlier MiVoice Business Solution Virtual Instance MiVB SVI version 1.0.0.25 Description: A vulnerability in the Desktop Client could allow an authenticated attacker to conduct a privilege escalation atta...
PT-2024-9386
Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions through 9.8.0.33 Description A flaw exists in the NuPoint Messenger NPM component of Mitel MiCollab due to inadequate sanitization of user-supplied data. This allows a remote, unauthenticated attacker to perform a SQL...
PT-2024-9387 · Mitel · Mitel Micollab
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.8.0.33 Description: A vulnerability in Mitel MiCollab's NuPoint Messenger component allows an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. This...