PT-2020-10150

Name of the Vulnerable Software and Affected Versions Mitel MiCollab AWV versions prior to 8.1.2.2 Description A cross-site scripting XSS issue exists due to insufficient validation in the join meeting interface of the web conferencing component. This could allow an unauthenticated attacker to...

PT-2020-10196

Name of the Vulnerable Software and Affected Versions Mitel MiCollab AWV versions prior to 8.1.2.2 Description A SQL injection issue exists due to insufficient input validation for the "registeredList.cgi" page, allowing an unauthenticated attack. This could enable an attacker to extract sensitiv...

PT-2020-10195

Name of the Vulnerable Software and Affected Versions Mitel MiCollab AWV versions prior to 8.1.2.2 Description A SQL injection issue exists due to insufficient input validation for the session parameter in the web conferencing component. This could allow an unauthenticated attacker to extract...

CVE-2019-19371: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation in the join meeting interface. A successful exploit could...

CVE-2019-19607: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the databas...

CVE-2019-12165

MiCollab 7.3 PR2 7.3.0.204 and earlier, 7.2 7.2.2.13 and earlier, and 7.1 7.1.0.57 and earlier and MiCollab AWV 6.3 6.3.0.103, 6.2 6.2.2.8, 6.1 6.1.0.28, 6.0 6.0.0.61, and 5.0 5.0.5.7 have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execu...

CVE-2019-12165

MiCollab 7.3 PR2 7.3.0.204 and earlier, 7.2 7.2.2.13 and earlier, and 7.1 7.1.0.57 and earlier and MiCollab AWV 6.3 6.3.0.103, 6.2 6.2.2.8, 6.1 6.1.0.28, 6.0 6.0.0.61, and 5.0 5.0.5.7 have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execu...

PT-2019-12673

Name of the Vulnerable Software and Affected Versions MiCollab versions 7.3 PR2 7.3.0.204 and earlier MiCollab versions 7.2 7.2.2.13 and earlier MiCollab versions 7.1 7.1.0.57 and earlier MiCollab AWV versions 6.3 6.3.0.103 and earlier MiCollab AWV versions 6.2 6.2.2.8 and earlier MiCollab AWV...