MI
Product
MiCollab
On CISA KEVExploited in the wildRansomware-linked
47
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 11Medium 23Low 2
Watch
Add MiCollab to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 6.0; 7.0; 7.1; 7.2; 7.3; 7.3.0.104 |
| CVE-2025-52914 | 8.8 | Aug 8 | A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection… Affected: before 9.8.3.103; 10.0.0.26 before 10.1.0.10 |
| CVE-2024-41714 | 8.8 | Oct 21 | A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow… Affected: through 9.8.1.5 |
| CVE-2022-36453 | 8.8 | Oct 25 | A vulnerability in the MiCollab Client API of Mitel MiCollab 9.1.3 through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper… Affected: 9.1.3 through 9.5.0.101 |
| CVE-2022-36451 | 8.8 | Oct 25 | A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF)… Affected: through 9.5.0.101 |
| CVE-2024-47912 | 8.2 | Oct 21 | A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to perform… Affected: through 9.8.1.201 |
| CVE-2020-13863 | 8.1 | Aug 26 | The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input… Affected: before 9.1.3 |
| CVE-2024-47189 | 7.7 | Oct 21 | The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL… Affected: through 9.8.1.201 |
| CVE-2024-30158 | 7.2 | Oct 21 | A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL… Affected: through 9.7.1.110 |
| CVE-2024-30157 | 7.2 | Oct 21 | A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a… Affected: through 9.7.1.110 |
| CVE-2020-25608 | 7.2 | Dec 18 | The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection Affected: before 9.2 |
Showing 11