Approved changes feed: RSS · Atom
cpe:2.3:a:mitel:micollab:*:*:*:*:*:-:*:*
part: a version: * update: *
| Vendor | Mitel (750d81d3-7166-5542-b6c5-c328632b06f9) |
|---|---|
| Product | Micollab (253bd128-a352-57c3-a9e8-831a7dc9679f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | - |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52914 |
vulnerable | 2026-06-08 07:31:13.187087 |
Details available
A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQL database commands.
Published: 2025-08-08T00:00:00.000Z
Updated: 2025-08-08T17:55:00.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55550 |
vulnerable | 2026-06-08 06:54:17.066768 |
Details available
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
Published: 2024-12-10T00:00:00.000Z
Updated: 2025-10-21T22:55:34.692Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41713 |
vulnerable | 2026-06-08 06:43:54.951177 |
Details available
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
Published: 2024-10-21T00:00:00.000Z
Updated: 2025-10-21T22:55:42.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25597 |
vulnerable | 2026-06-08 05:56:09.318069 |
Details available
A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to sensitive information.
Published: 2023-04-14T00:00:00.000Z
Updated: 2025-02-07T21:13:37.921Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36452 |
vulnerable | 2026-06-08 05:46:07.449666 |
Details available
A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application.
Published: 2022-10-25T00:00:00.000Z
Updated: 2025-05-07T20:21:32.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26143 |
vulnerable | 2026-06-08 05:41:50.684531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32072 |
vulnerable | 2026-06-08 05:31:54.672182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32071 |
vulnerable | 2026-06-08 05:31:54.671899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32070 |
vulnerable | 2026-06-08 05:31:54.671507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32069 |
vulnerable | 2026-06-08 05:31:54.671196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32068 |
vulnerable | 2026-06-08 05:31:54.670734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32067 |
vulnerable | 2026-06-08 05:31:54.670327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27402 |
vulnerable | 2026-06-08 05:31:21.349426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27401 |
vulnerable | 2026-06-08 05:31:21.347260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35547 |
vulnerable | 2026-06-08 05:25:01.313895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27340 |
vulnerable | 2026-06-08 05:23:52.609275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25612 |
vulnerable | 2026-06-08 05:22:36.904927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25611 |
vulnerable | 2026-06-08 05:22:36.904656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25610 |
vulnerable | 2026-06-08 05:22:36.904361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25609 |
vulnerable | 2026-06-08 05:22:36.903978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25608 |
vulnerable | 2026-06-08 05:22:36.903478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25606 |
vulnerable | 2026-06-08 05:22:36.903064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13863 |
vulnerable | 2026-06-08 05:18:01.248503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.