CVE-2024-47223
Oct. 21, 2024, 8:15 p.m.
Tags
Product(s) Impacted
Mitel MiCollab
- through 9.8 SP1 FP2 (9.8.1.201)
Description
A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.
Weaknesses
Date
Published: Oct. 21, 2024, 8:15 p.m.
Last Modified: Oct. 21, 2024, 8:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org