Mitel Mivoice Business Solution Virtual Instance vulnerabilities
3 vulnerabilities
Known vulnerabilities in Mitel Mivoice Business Solution Virtual Instance, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2024-41714mitel · micollab +1 moremitel micollabA vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges within the context of the system.CVSS8.8HighEPSS1.31%RoutineCVE-2024-35315mitel · micollab +1 moremitel micollabA vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an authenticated attacker to conduct a privilege escalation attack due to improper file validation. A successful exploit could allow an attacker to run arbitrary code with elevated privileges.CVSS5.6MediumEPSS0.77%PrioritiseCVE-2024-35314mitel · micollab +1 moremitel micollabA vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts.CVSS9.8CriticalEPSS1.80%