Vulnerabilities > Mitel > Micollab > 9.1.2

DATE CVE VULNERABILITY TITLE RISK
2020-12-18 CVE-2020-25608 SQL Injection vulnerability in Mitel Micollab
The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection.
network
low complexity
mitel CWE-89
6.5
6.5
2020-12-18 CVE-2020-25606 Cross-site Scripting vulnerability in Mitel Micollab
The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS.
network
mitel CWE-79
4.3
4.3
2020-08-26 CVE-2020-13863 Injection vulnerability in Mitel Micollab
The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters.
network
low complexity
mitel CWE-74
5.5
5.5