MI
Product
MiCollab
On CISA KEVExploited in the wildRansomware-linked
47
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 11Medium 23Low 2
Watch
Add MiCollab to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26143 In wildKEV | 9.8 | Mar 9 | MiCollab, MiVoice Business Express Access Control Vulnerability Affected: before 9.4; 9.4; 9.4 |
| CVE-2024-41713 RansomwareIn wildKEV | 9.1 | Oct 21 | Mitel MiCollab Path Traversal Vulnerability Affected: through 9.8.1.201 |
| CVE-2024-35286 | 9.8 | Oct 21 | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization… Affected: through 9.8.0.33 |
| CVE-2024-35285 | 9.8 | Oct 21 | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a command injection attack due to insufficient… Affected: through 9.8.0.33 |
| CVE-2024-35314 | 9.8 | Oct 21 | A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an unauthenticated… Affected: through 9.7.1.110 |
| CVE-2022-41326 | 9.8 | Nov 22 | The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls Affected: through 9.6.0.105 |
| CVE-2022-36452 | 9.8 | Oct 25 | A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files Affected: before 9.6 |
| CVE-2021-32071 | 9.8 | Aug 13 | The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due to improper access control Affected: before 9.3 |
| CVE-2019-12165 | 9.8 | May 29 | MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2 (6.2.2.8), 6.1 (6.1.0.28), 6.0… Affected: 7.1 through 7.1.0.57; 7.2 through 7.2.2.13; 7.3 through 7.3.0.204 |
| CVE-2024-47223 | 9.4 | Oct 21 | A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL… Affected: through 9.8.1.201 |
| CVE-2020-35547 | 9.1 | Jan 29 | A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access (view and modify) to user data Affected: through 9.2 |
Showing 11