Mitel

Micollab Audio, Web & Video Conferencing

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-11797

  • EPSS 0.51%
  • Veröffentlicht 26.08.2020 19:15:14
  • Zuletzt bearbeitet 21.11.2024 04:58:38

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insuffi...

5.3

CVE-2020-11798

  • EPSS 85.15%
  • Veröffentlicht 10.06.2020 18:15:10
  • Zuletzt bearbeitet 21.11.2024 04:58:38

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insuff...

6.1

CVE-2019-19371

  • EPSS 0.33%
  • Veröffentlicht 02.03.2020 18:15:11
  • Zuletzt bearbeitet 21.11.2024 04:34:39

A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the j...

9.8

CVE-2019-19607

  • EPSS 0.94%
  • Veröffentlicht 02.03.2020 18:15:11
  • Zuletzt bearbeitet 21.11.2024 04:35:02

A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to...

9.8

CVE-2019-19608

  • EPSS 0.94%
  • Veröffentlicht 02.03.2020 18:15:11
  • Zuletzt bearbeitet 21.11.2024 04:35:02

A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an at...

10

CVE-2019-12165

  • EPSS 0.78%
  • Veröffentlicht 29.05.2019 17:29:00
  • Zuletzt bearbeitet 21.11.2024 04:22:20

MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2 (6.2.2.8), 6.1 (6.1.0.28), 6.0 (6.0.0.61), and 5.0 (5.0.5.7) have a Command Execution Vulnerability. Successful...