Mitel: >> Micollab >> 9.2 Security Vulnerabilities
The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due to improper access control. A successful exploit could allow an attacker to view and modify application data, and cause a denial of service for users.
CVSS Score
9.8
EPSS Score
0.006
Published
2021-08-13
The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information (disclosing sensitive application data) due to insufficient output sanitization. A successful exploit could allow an attacker to view source code methods.
CVSS Score
6.5
EPSS Score
0.003
Published
2021-08-13
A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access (view and modify) to user data.
CVSS Score
9.1
EPSS Score
0.004
Published
2021-01-29
Page 4