Approved changes feed: RSS · Atom

cpe:2.3:a:mitel:micollab:*:*:*:*:*:-:*:*

part: a version: * update: *

VendorMitel (750d81d3-7166-5542-b6c5-c328632b06f9)
ProductMicollab (253bd128-a352-57c3-a9e8-831a7dc9679f)
Edition*
Language*
Software edition*
Target software-
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-52914 vulnerable 2026-06-08 07:31:13.187087 Details available
A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQL database commands.
Published: 2025-08-08T00:00:00.000Z
Updated: 2025-08-08T17:55:00.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55550 vulnerable 2026-06-08 06:54:17.066768 Details available
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
Published: 2024-12-10T00:00:00.000Z
Updated: 2025-10-21T22:55:34.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41713 vulnerable 2026-06-08 06:43:54.951177 Details available
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
Published: 2024-10-21T00:00:00.000Z
Updated: 2025-10-21T22:55:42.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25597 vulnerable 2026-06-08 05:56:09.318069 Details available
A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to sensitive information.
Published: 2023-04-14T00:00:00.000Z
Updated: 2025-02-07T21:13:37.921Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36452 vulnerable 2026-06-08 05:46:07.449666 Details available
A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application.
Published: 2022-10-25T00:00:00.000Z
Updated: 2025-05-07T20:21:32.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26143 vulnerable 2026-06-08 05:41:50.684531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32072 vulnerable 2026-06-08 05:31:54.672182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32071 vulnerable 2026-06-08 05:31:54.671899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32070 vulnerable 2026-06-08 05:31:54.671507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32069 vulnerable 2026-06-08 05:31:54.671196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32068 vulnerable 2026-06-08 05:31:54.670734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32067 vulnerable 2026-06-08 05:31:54.670327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27402 vulnerable 2026-06-08 05:31:21.349426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27401 vulnerable 2026-06-08 05:31:21.347260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35547 vulnerable 2026-06-08 05:25:01.313895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27340 vulnerable 2026-06-08 05:23:52.609275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25612 vulnerable 2026-06-08 05:22:36.904927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25611 vulnerable 2026-06-08 05:22:36.904656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25610 vulnerable 2026-06-08 05:22:36.904361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25609 vulnerable 2026-06-08 05:22:36.903978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25608 vulnerable 2026-06-08 05:22:36.903478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25606 vulnerable 2026-06-08 05:22:36.903064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13863 vulnerable 2026-06-08 05:18:01.248503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.