Mitel Micollab Audio\, Web \& Video Conferencing vulnerabilities
6 vulnerabilities
Known vulnerabilities in Mitel Micollab Audio\, Web \& Video Conferencing, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2020-11797mitel · micollab_audio\,_web_\&_video_conferencingmitel micollab_audio\,_web_\&_video_conferencingAn Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit could allow an attacker to access sensitive shared files.CVSS7.5HighEPSS1.17%RoutineCVE-2020-11798mitel · micollab_audio\,_web_\&_video_conferencingmitel micollab_audio\,_web_\&_video_conferencingA Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.CVSS5.3MediumEPSS48.77%PrioritiseCVE-2019-19608mitel · micollab_audio\,_web_\&_video_conferencingmitel micollab_audio\,_web_\&_video_conferencingA SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.CVSS9.8CriticalEPSS1.71%PrioritiseCVE-2019-19607mitel · micollab_audio\,_web_\&_video_conferencingmitel micollab_audio\,_web_\&_video_conferencingA SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.CVSS9.8CriticalEPSS1.71%RoutineCVE-2019-19371mitel · micollab_audio\,_web_\&_video_conferencingmitel micollab_audio\,_web_\&_video_conferencingA cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts.CVSS6.1MediumEPSS1.04%PrioritiseCVE-2019-12165mitel · micollab +1 moremitel micollabMiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2 (6.2.2.8), 6.1 (6.1.0.28), 6.0 (6.0.0.61), and 5.0 (5.0.5.7) have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execute arbitrary system commands.CVSS10.0CriticalEPSS3.40%