CVE-2024-35314

Affects Mitel MiCollab Desktop Client (versions ≤ 9.7.1.110) and MiVoice Business Solution Virtual Instance (MiVB SVI ≤ 1.0.0.25). The vulnerability is a command injection caused by insufficient parameter sanitization, enabling an unauthenticated attacker to execute arbitrary scripts with user in...

CVE-2024-41714

Mit el MiCollab Web Interface (through 9.8 SP1 / 9.8.1.5) and Mitel MiVoice Business Solution Virtual Instance (MiVB SVI through 1.0.0.27) contain a command-injection vulnerability due to insufficient parameter sanitization. Authenticated attackers could execute arbitrary commands with elevated p...

CVE-2024-35315

Mitel MiCollab Desktop Client (versions up to 9.7.1.110) and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25 contain a privilege-escalation flaw due to improper file validation. An authenticated, local attacker could execute arbitrary code with elevated privileges. MITRE-like impac...