CVE-2021-32069

The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data...

CVE-2021-32069

CVE-2021-32069 affects the Mitel MiCollab AWV component and is caused by improper TLS negotiation, enabling potential Man-In-The-Middle attacks. Affected are MiCollab installations prior to version 9.3, where an attacker could view and modify data in transit. The vulnerability is documented acros...

CVE-2021-32072

The CVE-2021-32072 entry concerns Mitel MiCollab: the MiCollab Client Service component in MiCollab prior to version 9.3 has an information disclosure flaw due to insufficient output sanitization, allowing an attacker to view source code methods. Connected documents confirm the affected product a...

CVE-2021-32072

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information disclosing sensitive application data due to insufficient output sanitization. A successful exploit could allow an attacker to view source code methods...

CVE-2021-32071

The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due to improper access control. A successful exploit could allow an attacker to view and modify application data, and cause a denial of service for users...

CVE-2021-32071

CVE-2021-32071 affects Mitel MiCollab MiCollab Client service prior to version 9.3. An unauthenticated user can bypass access controls to view/modify application data and cause denial of service. The vulnerability is documented across multiple feeds (NVD, Red Hat CVE, CVE list, and related securi...

CVE-2021-32070

The CVE-2021-32070 entry concerns the Mitel MiCollab MiCollab Client Service component prior to version 9.3, where an insecure header response could enable a clickjacking attack. An attacker could modify the browser header and redirect users, as described in the public records. No explicit exploi...

CVE-2021-32070

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking attack due to an insecure header response. A successful exploit could allow an attacker to modify the browser header and redirect users...

CVE-2021-32068

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify applicatio...

CVE-2021-32068

CVE-2021-32068 affects Mitel MiCollab components AWV and MiCollab Client Service prior to version 9.3. The vulnerability allows a Man‑In‑The‑Middle by sending multiple TLS session renegotiation requests due to insufficient TLS session controls, potentially enabling an attacker to modify applicati...

CVE-2021-32067

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP response due to insufficient output sanitization...

CVE-2021-32067

The CVE-2021-32067 refers to Mitel MiCollab Client Service prior to version 9.3, where insufficient output sanitization/validation could allow an attacker to view sensitive system information via HTTP responses (information disclosure). Affected component: MiCollab Client Service in Mitel MiColla...

CVE-2021-27402

The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access view and modify user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal...

CVE-2021-27402

Mitel MiCollab’s SAS Admin portal before 9.2 FP2 is affected by a directory traversal vulnerability allowing an unauthenticated attacker to view and modify user data through improper URL validation. Affected: MiCollab versions prior to 9.2 FP2. Root cause: improper validation enabling arbitrary d...

CVE-2021-27401

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

CVE-2021-27401

The Mitel MiCollab Web Client Join Meeting page is vulnerable to Cross‑Site Scripting (XSS) in versions before 9.2 FP2, caused by insufficient input validation. This could allow an attacker to view and modify user data. No exploitation details or remediation are provided in the connected documents.

Mitel Networks MiCollab 安全漏洞

An information disclosure vulnerability exists in the MiCollab Client Service component in Mitel MiCollab versions prior to 9.3, an enterprise collaboration software and tools platform solution. The vulnerability stems from insufficient output validation. An attacker could exploit the vulnerabili...

Mitel Networks MiCollab 跨站脚本漏洞

A cross-site scripting vulnerability exists in the "Join a Meeting" page of Mitel MiCollab, an enterprise collaboration software and tools platform solution, in versions prior to Mitel MiCollab 9.2 FP2. The vulnerability stems from insufficient input validation. An attacker could execute arbitrar...

Mitel Networks MiCollab 安全漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A security vulnerability exists in Mitel Networks MiCollab that stems from the product's MiCollab Client service lacking system access validatio...

Mitel Networks MiCollab 信任管理问题漏洞

Mitel Networks MiCollab is a mobile application from Mitel Networks Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees.A security vulnerability exists in versions of Mitel Networks MiCollab prior to 9.3, which stems from a component that could be...