Known vulnerabilities in MiCollab

Vendor: Mitel
Software: MiCollab
Software CPE: cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*
Website: https://www.mitel.com/
Total vulnerabilities: 39
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MiCollab MiCollab is affected by 39 known vulnerabilities: 2 critical, 21 high, 9 medium, 7 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134866 - Improper Certificate Validation
 CWE-295 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134867 - Command injection
 CWE-77 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134868 - Command injection
 CWE-77 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134869 - Missing Authentication for Critical Function
 CWE-306 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134870 - Server-Side Request Forgery (SSRF)
 CWE-918 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134871 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134872 - Command injection
 CWE-77 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134873 - Command injection
 CWE-77 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134874 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134875 - Unrestricted Upload of File with Dangerous Type
 CWE-434 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134876 - Improper Restriction of XML External Entity Reference ('XXE')
 CWE-611 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU134877 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 9.8 SP3 FP2 9.8.3.203, 10.2 SP1 FP2 10.2.1.205 18.06.2026 SB2026061848
#VU125515 - Execution with Unnecessary Privileges
 CWE-250 Medium
No
No
 9.8 SP3 FP1 9.8.3.103, 10.2 SP1 10.2.1.11, 10.2.0.24 08.04.2026 SB20260408176
#VU125514 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 9.8 SP3 FP1 9.8.3.103, 10.2 SP1 10.2.1.11, 10.2.0.24 08.04.2026 SB20260408176
#VU113197 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-52914		 CWE-89 Medium
No
No
 9.8 SP3 FP1 9.8.3.103, 10.1 10.1.0.10 24.07.2025 SB2025072429
#VU111927 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-52913		 CWE-22 High
No
No
 9.8 SP3 9.8.3.1 25.06.2025 SB2025062517
#VU102437 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-47224		 CWE-93 Low
No
No
 9.8 SP1 FP2 07.01.2025 SB2025010754
#VU102436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-47189		 CWE-89 High
No
No
 9.8 SP1 FP2 07.01.2025 SB2025010754
#VU102435 - Improper Authentication
CVE-2024-47912		 CWE-287 High
No
No
 9.8 SP1 FP2 07.01.2025 SB2025010754
#VU102434 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-47223		 CWE-89 High
No
No
 9.8 SP1 FP2 07.01.2025 SB2025010754


Showing elements 1 - 20 out of 39