Approved changes feed: RSS · Atom

cpe:2.3:a:mitel:micollab_audio\,_web_\&_video_conferencing:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMitel (750d81d3-7166-5542-b6c5-c328632b06f9)
ProductMicollab Audio, Web & Video Conferencing (99ce4e92-5ac8-5262-a381-9121aa9ad4a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11798 vulnerable 2026-06-08 05:17:54.729264 Details available
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.
Published: 2020-06-10T00:00:00.000Z
Updated: 2024-08-04T11:42:00.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11797 vulnerable 2026-06-08 05:17:54.728828 Details available
An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit could allow an attacker to access sensitive shared files.
Published: 2020-08-26T18:15:24.000Z
Updated: 2024-08-04T11:42:00.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19608 vulnerable 2026-06-08 05:13:23.131025 Details available
A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
Published: 2020-03-02T17:56:07.000Z
Updated: 2024-08-05T02:25:11.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19607 vulnerable 2026-06-08 05:13:23.130695 Details available
A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
Published: 2020-03-02T17:55:30.000Z
Updated: 2024-08-05T02:25:11.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19371 vulnerable 2026-06-08 05:13:22.220600 Details available
A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts.
Published: 2020-03-02T17:55:01.000Z
Updated: 2024-08-05T02:16:46.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12165 vulnerable 2026-06-08 05:12:38.627934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.