Mitel MiCollab
Approved changes feed: RSS · Atom
cpe:2.3:a:mitel:micollab:-:*:*:*:*:-:*:*
part: a version: - update: *
| Vendor | Mitel (750d81d3-7166-5542-b6c5-c328632b06f9) |
|---|---|
| Product | Micollab (253bd128-a352-57c3-a9e8-831a7dc9679f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | - |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41714 |
vulnerable | 2026-06-08 06:43:54.952325 |
Details available
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges within the context of the system.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-10-22T14:03:51.621Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35314 |
vulnerable | 2026-06-08 06:37:35.920199 |
Details available
A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts.
Published: 2024-10-21T00:00:00.000Z
Updated: 2025-03-25T14:14:25.141Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35287 |
vulnerable | 2026-06-08 06:37:35.862662 |
Details available
A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allow an authenticated attacker with administrative privilege to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-10-22T13:29:45.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30158 |
vulnerable | 2026-06-08 06:35:29.106302 |
Details available
A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary database and management operations.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-10-22T13:34:57.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30157 |
vulnerable | 2026-06-08 06:35:29.104255 |
Details available
A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary database and management operations.
Published: 2024-10-21T00:00:00.000Z
Updated: 2024-10-22T13:38:41.476Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.