CVE-2019-19608

The CVE-2019-19608 entry concerns Mitel MiCollab AWV prior to 8.1.2.2, where insufficient input validation on the registeredList.cgi page enables an unauthenticated SQL injection in the web conferencing component. The vulnerability could allow an attacker to extract sensitive database information...

CVE-2019-19607

CVE-2019-19607 affects Mitel MiCollab AWV prior to 8.1.2.2, with a SQL injection in the web conferencing component due to insufficient input validation on the session parameter. The vulnerability is unauthenticated and could allow an attacker to extract sensitive data from the database and execut...

CVE-2019-19607

A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the databas...

CVE-2019-19371

CVE-2019-19371: A reflected XSS in the Mitel MiCollab AWV web conferencing component (version before 8.1.2.2) allows an unauthenticated attacker to execute arbitrary scripts via the join meeting interface due to insufficient input validation. Affected product: Mitel MiCollab AWV

CVE-2019-19371

A cross-site scripting XSS vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation in the join meeting interface. A successful exploit could...

CVE-2019-12165

MiCollab 7.3 PR2 7.3.0.204 and earlier, 7.2 7.2.2.13 and earlier, and 7.1 7.1.0.57 and earlier and MiCollab AWV 6.3 6.3.0.103, 6.2 6.2.2.8, 6.1 6.1.0.28, 6.0 6.0.0.61, and 5.0 5.0.5.7 have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execu...

CVE-2019-12165

MiCollab 7.3 PR2 7.3.0.204 and earlier, 7.2 7.2.2.13 and earlier, and 7.1 7.1.0.57 and earlier and MiCollab AWV 6.3 6.3.0.103, 6.2 6.2.2.8, 6.1 6.1.0.28, 6.0 6.0.0.61, and 5.0 5.0.5.7 have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execu...