CVE-2020-25608

The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection...

CVE-2020-25608

The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection...

Sql injection

The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection...

CVE-2020-25608

The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection...

CVE-2020-25608

The CVE-2020-25608 entry concerns Mitel MiCollab’s SAS portal (pre-9.2). The connected documents confirm a SQL Injection vulnerability caused by improper input validation, enabling an attacker to access user credentials. Affected component is the SAS portal; root cause is input validation failure...

CVE-2020-25608: Improper Input Validation

The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection...

PT-2020-16123

Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions prior to 9.2 Description The issue is related to improper input validation, which could allow an attacker to access user credentials. This is due to a SQL Injection flaw in the SAS portal. Recommendations For versions...

CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

PT-2020-13737

Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions prior to 9.1.3 Description The issue is related to the improper handling of input parameters in the SAS portal of Mitel MiCollab, allowing an attacker to perform a header injection in HTTP responses. This could enable a...

CVE-2020-13863: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...