Approved changes feed: RSS · Atom

cpe:2.3:a:mitel:micollab:9.2:fp1:*:*:*:-:*:*

part: a version: 9.2 update: fp1

VendorMitel (750d81d3-7166-5542-b6c5-c328632b06f9)
ProductMicollab (253bd128-a352-57c3-a9e8-831a7dc9679f)
Edition*
Language*
Software edition*
Target software-
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27402 vulnerable 2026-06-08 05:31:21.349647 Details available
The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal.
Published: 2021-08-13T15:25:36.000Z
Updated: 2024-08-03T20:48:16.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27401 vulnerable 2026-06-08 05:31:21.348997 Details available
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting (XSS).
Published: 2021-08-13T15:18:28.000Z
Updated: 2024-08-03T20:48:16.665Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.