Vulnerabilities > Mitel > Micollab Audio WEB Video Conferencing > High

DATE CVE VULNERABILITY TITLE RISK
2020-03-02 CVE-2019-19608 SQL Injection vulnerability in Mitel Micollab Audio, web & Video Conferencing
A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page.
network
low complexity
mitel CWE-89
7.5
2020-03-02 CVE-2019-19607 SQL Injection vulnerability in Mitel Micollab Audio, web & Video Conferencing
A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter.
network
low complexity
mitel CWE-89
7.5