Mitel Networks MiCollab 跨站脚本漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. A cross-site scripting vulnerability exists in the AWV portal in Mitel MiCollab versions prior to 9.2. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by sending...

Mitel Networks MiCollab 跨站脚本漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. A cross-site scripting vulnerability exists in NuPoint Messenger Portal for Mitel MiCollab versions prior to 9.2. The vulnerability stems from insufficient input validation. An attacker could exploit the...

Mitel MiCollab AWV Authentication Bypass Vulnerability

Mitel MiCollab AWV is an application for managing audio, web and video conferencing from Mitel Networks Canada. An authentication bypass vulnerability exists in Mitel MiCollab AWV versions prior to 8.1.2.4 and 9.x versions prior to 9.1.3. The vulnerability is related to an error in the publishing...

CVE-2020-11797

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...

CVE-2020-11797

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...

Authentication flaw

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...

CVE-2020-11797

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...

CVE-2020-11797

Mitel MiCollab AWV contains an authentication bypass in the Published Area of the Web Meeting component, affecting versions before 8.1.2.4 and 9.x before 9.1.3. An unauthenticated attacker could gain access to unauthorized information by bypassing access validation and may access sensitive shared...

CVE-2020-13767

The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and if successful could allow an attacker to gain access to sensitive information,...

CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

CVE-2020-13767

The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and if successful could allow an attacker to gain access to sensitive information,...

Improper access control

The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and if successful could allow an attacker to gain access to sensitive information,...

Design/Logic Flaw

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

CVE-2020-13767

The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and if successful could allow an attacker to gain access to sensitive information,...

CVE-2020-13767

The CVE-2020-13767 entry affects Mitel MiCollab for iOS prior to version 9.1.332. The issue is insufficient access control that could let an unauthorized user access restricted files and folders, with exploitation requiring a rooted iOS device and the potential to read sensitive information if su...

CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

CVE-2020-13863

The CVE-2020-13863 entry concerns Mitel MiCollab’s SAS portal (pre-9.1.3) vulnerable to header injection in HTTP responses due to improper input handling. An attacker could exploit this to access user data. CVSS data in the NVD lists both a NETWORK attack with LOW complexity (v2) and HIGH impact ...

Mitel Networks MiCollab AWV Path Traversal Vulnerability

Mitel Networks MiCollab AWV is an application for managing audio, web and video conferencing from Mitel Networks Canada. A path traversal vulnerability exists in the web conference component in Mitel Networks MiCollab AWV versions prior to 8.1.2.4 and 9.x versions prior to 9.1.3, which stems from...

CVE-2020-11798

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...