Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-25597

A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.4%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2023-25597
  • Mitel » Micollab » Version: N/A
    cpe:2.3:a:mitel:micollab:-
  • Mitel » Micollab » Version: 7.3
    cpe:2.3:a:mitel:micollab:7.3
  • Mitel » Micollab » Version: 8.0
    cpe:2.3:a:mitel:micollab:8.0
  • Mitel » Micollab » Version: 8.1
    cpe:2.3:a:mitel:micollab:8.1
  • Mitel » Micollab » Version: 8.1.1
    cpe:2.3:a:mitel:micollab:8.1.1
  • Mitel » Micollab » Version: 8.1.2
    cpe:2.3:a:mitel:micollab:8.1.2
  • Mitel » Micollab » Version: 9.0
    cpe:2.3:a:mitel:micollab:9.0
  • Mitel » Micollab » Version: 9.1
    cpe:2.3:a:mitel:micollab:9.1
  • Mitel » Micollab » Version: 9.1.2
    cpe:2.3:a:mitel:micollab:9.1.2
  • Mitel » Micollab » Version: 9.1.3
    cpe:2.3:a:mitel:micollab:9.1.3
  • Mitel » Micollab » Version: 9.2
    cpe:2.3:a:mitel:micollab:9.2
  • Mitel » Micollab » Version: 9.3
    cpe:2.3:a:mitel:micollab:9.3
  • Mitel » Micollab » Version: 9.4
    cpe:2.3:a:mitel:micollab:9.4
  • Mitel » Micollab » Version: 9.5.0.101
    cpe:2.3:a:mitel:micollab:9.5.0.101
  • Mitel » Micollab » Version: 9.6
    cpe:2.3:a:mitel:micollab:9.6
  • Mitel » Micollab » Version: 9.6.2.9
    cpe:2.3:a:mitel:micollab:9.6.2.9


Contact Us

Shodan ® - All rights reserved