Approved changes feed: RSS · Atom
cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mitel (750d81d3-7166-5542-b6c5-c328632b06f9) |
|---|---|
| Product | Micollab (253bd128-a352-57c3-a9e8-831a7dc9679f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47912 |
vulnerable | 2026-06-08 06:48:13.435033 |
Details available
A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to perform unauthorized data-access attacks due to missing authentication mechanisms. A successful exploit could allow an attacker to access and delete sensitive information.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-10-22T17:32:44.732Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47224 |
vulnerable | 2026-06-08 06:48:11.596387 |
Details available
A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a CRLF injection attack due to inadequate encoding of user input in URLs. A successful exploit could allow an attacker to perform a phishing attack.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-11-05T21:05:47.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47223 |
vulnerable | 2026-06-08 06:48:11.595926 |
Details available
A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-10-22T17:22:08.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47189 |
vulnerable | 2026-06-08 06:48:11.563374 |
Details available
The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL injection due to insufficient sanitization of user input. A successful exploit could allow an attacker with knowledge of specific details to access non-sensitive user provisioning information and execute arbitrary SQL database commands.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-11-04T21:50:17.150Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41714 |
vulnerable | 2026-06-08 06:43:54.953323 |
Details available
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges within the context of the system.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-10-22T14:03:51.621Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41712 |
vulnerable | 2026-06-08 06:43:54.949129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35315 |
vulnerable | 2026-06-08 06:37:35.926752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35314 |
vulnerable | 2026-06-08 06:37:35.922444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35287 |
vulnerable | 2026-06-08 06:37:35.862862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35286 |
vulnerable | 2026-06-08 06:37:35.860721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35285 |
vulnerable | 2026-06-08 06:37:35.858782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30160 |
vulnerable | 2026-06-08 06:35:29.107181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30159 |
vulnerable | 2026-06-08 06:35:29.106840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30158 |
vulnerable | 2026-06-08 06:35:29.106375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30157 |
vulnerable | 2026-06-08 06:35:29.105871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41326 |
vulnerable | 2026-06-08 05:48:30.261409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36454 |
vulnerable | 2026-06-08 05:46:07.450592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36453 |
vulnerable | 2026-06-08 05:46:07.450112 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36451 |
vulnerable | 2026-06-08 05:46:07.448335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12165 |
vulnerable | 2026-06-08 05:12:38.627244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18819 |
vulnerable | 2026-06-08 05:11:14.793188 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.