Known vulnerabilities in MiCollab - page 2

Vendor: Mitel
Software: MiCollab
Software CPE: cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*
Website: https://www.mitel.com/
Total vulnerabilities: 39
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MiCollab MiCollab is affected by 39 known vulnerabilities: 2 critical, 21 high, 9 medium, 7 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102433 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-55550		 CWE-22 High
No
Exploited
 9.8 SP1 FP2 07.01.2025 SB2025010754
#VU102432 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-41713		 CWE-22 Critical
Available
Exploited
 9.8 SP1 FP2 07.01.2025 SB2025010754
#VU94731 - Command injection
CVE-2024-41714		 CWE-77 Medium
No
No
 9.8 SP1 FP1 25.07.2024 SB2024072517
#VU94726 - Command injection
CVE-2024-41712		 CWE-77 Medium
No
No
 9.8 SP1 FP1 25.07.2024 SB2024072517
#VU94725 - Permissions, Privileges, and Access Controls
CVE-2024-35287		 CWE-264 Low
No
No
 9.8 SP1 FP1 25.07.2024 SB2024072517
#VU90711 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-35286		 CWE-89 High
No
No
 9.8 SP1 03.06.2024 SB2024060313
#VU90710 - Command injection
CVE-2024-35285		 CWE-77 High
No
No
 9.8 SP1 03.06.2024 SB2024060313
#VU90709 - Permissions, Privileges, and Access Controls
CVE-2024-35315		 CWE-264 Low
Available
No
 9.8 03.06.2024 SB2024060312
#VU90707 - Argument Injection or Modification
CVE-2024-35314		 CWE-88 High
No
No
 9.8 03.06.2024 SB2024060312
#VU88901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-30160		 CWE-79 Low
No
No
 9.8 23.04.2024 SB2024042306
#VU88900 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-30159		 CWE-79 Low
No
No
 9.8 23.04.2024 SB2024042306
#VU88897 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-30158		 CWE-89 Low
No
No
 9.8 23.04.2024 SB2024042306
#VU88896 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-30157		 CWE-89 Low
No
No
 9.8 23.04.2024 SB2024042306
#VU74570 - Missing Authorization
CVE-2023-25597		 CWE-862 Medium
No
No
 9.7 06.04.2023 SB2023040665
#VU68540 - Unrestricted Upload of File with Dangerous Type
CVE-2022-41326		 CWE-434 Critical
No
No
 - 20.10.2022 SB2022102046
#VU66161 - Improper Authorization
CVE-2022-36454		 CWE-285 Medium
No
No
 9.6 08.08.2022 SB2022080806
#VU66160 - Improper Authorization
CVE-2022-36453		 CWE-285 Medium
No
No
 9.6 08.08.2022 SB2022080806
#VU66159 - Unrestricted Upload of File with Dangerous Type
CVE-2022-36452		 CWE-434 Medium
No
No
 9.6 08.08.2022 SB2022080806
#VU66158 - Server-Side Request Forgery (SSRF)
CVE-2022-36451		 CWE-918 Medium
No
No
 9.6 08.08.2022 SB2022080806


Showing elements 21 - 40 out of 39