Логотип exploitDog
bind:CVE-2024-47223
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-47223

Количество 3

Количество 3

nvd логотип

CVE-2024-47223

больше 1 года назад

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.

CVSS3: 9.4
EPSS: Низкий
github логотип

GHSA-75jr-3fww-8c5h

больше 1 года назад

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.

CVSS3: 9.4
EPSS: Низкий
fstec логотип

BDU:2024-09111

больше 1 года назад

Уязвимость компонента AWV (Audio, Web and Video Conferencing) платформы для совместной работы Mitel MiCollab, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-47223

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.

CVSS3: 9.4
1%
Низкий
больше 1 года назад
github логотип
GHSA-75jr-3fww-8c5h

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.

CVSS3: 9.4
1%
Низкий
больше 1 года назад
fstec логотип
BDU:2024-09111

Уязвимость компонента AWV (Audio, Web and Video Conferencing) платформы для совместной работы Mitel MiCollab, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.4
1%
Низкий
больше 1 года назад

Уязвимостей на страницу