CVE-2020-25611

The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending arbitrary code due to improper input validation, aka XSS. Successful exploitation could allow an attacker to view user conference information...

Input validation

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS...

CVE-2020-25606

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS...

CVE-2020-25606

The CVE-2020-25606 vulnerability affects Mitel MiCollab’s AWV component prior to version 9.2. It allows an attacker to view system information by sending arbitrary code due to improper input validation (XSS). Affected product: Mitel MiCollab (AWV component). Root cause: input validation weakness ...

CVE-2020-25611

The CVE-2020-25611 entry concerns Mitel MiCollab (AWV portal) prior to version 9.2, where improper input validation enables cross‑site scripting (XSS). This could let an attacker view user conference information by sending arbitrary code. Documents confirm the vulnerability class (XSS) and affect...

CVE-2020-25611

The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending arbitrary code due to improper input validation, aka XSS. Successful exploitation could allow an attacker to view user conference information...

CVE-2020-25610

CVE-2020-25610 affects the Mitel MiCollab AWV component prior to version 9.2. The vulnerability arises from insufficient access control for conference codes, which could allow an attacker to gain access to a web conference. The available connected sources corroborate this description, but do not ...

CVE-2020-25610

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insufficient access control for conference codes...

Mitel Networks MiCollab 跨站脚本漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. A cross-site scripting vulnerability exists in the AWV portal in Mitel MiCollab versions prior to 9.2. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by sending...

Mitel MiCollab AWV Authentication Bypass Vulnerability

Mitel MiCollab AWV is an application for managing audio, web and video conferencing from Mitel Networks Canada. An authentication bypass vulnerability exists in Mitel MiCollab AWV versions prior to 8.1.2.4 and 9.x versions prior to 9.1.3. The vulnerability is related to an error in the publishing...

CVE-2020-11797

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...

CVE-2020-11797

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit...

CVE-2020-11797

Mitel MiCollab AWV contains an authentication bypass in the Published Area of the Web Meeting component, affecting versions before 8.1.2.4 and 9.x before 9.1.3. An unauthenticated attacker could gain access to unauthorized information by bypassing access validation and may access sensitive shared...

Mitel Networks MiCollab AWV Path Traversal Vulnerability

Mitel Networks MiCollab AWV is an application for managing audio, web and video conferencing from Mitel Networks Canada. A path traversal vulnerability exists in the web conference component in Mitel Networks MiCollab AWV versions prior to 8.1.2.4 and 9.x versions prior to 9.1.3, which stems from...

Directory traversal

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

PT-2020-12854 · Mitel · Mitel Micollab Awv

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab AWV versions prior to 8.1.2.4 Mitel MiCollab AWV versions 9.x prior to 9.1.3 Description: A Directory Traversal issue in the web conference component could allow an attacker to access arbitrary files from restricted directories...

CVE-2020-11798

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

CVE-2020-11798

CVE-2020-11798 affects Mitel MiCollab AWV’s web conference component. Versions prior to 8.1.2.4 and 9.x prior to 9.1.3 are vulnerable to a Directory Traversal flaw caused by insufficient access validation, allowing an attacker to access arbitrary files in restricted server directories via a craft...

CVE-2019-19607

A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the databas...

CVE-2019-19608

A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from th...