Mitel: >> Micollab >> 8.1 Security Vulnerabilities
The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and (if successful) could allow an attacker to gain access to sensitive information,
CVSS Score
5.9
EPSS Score
0.003
Published
2020-08-26
The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information.
CVSS Score
8.1
EPSS Score
0.007
Published
2020-08-26
Page 5