Mitel Micollab Audio, Web & Video Conferencing — known CVE vulnerabilities

Every CVE whose affected-product data names Mitel Micollab Audio, Web & Video Conferencing, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-12165 — CVSS 9.8 (critical): MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2…
• CVE-2019-19607 — CVSS 9.8 (critical): A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack…
• CVE-2019-19608 — CVSS 9.8 (critical): A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated…
• CVE-2020-11797 — CVSS 7.5 (high): An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x…
• CVE-2019-19371 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an…
• CVE-2020-11798 — CVSS 5.3 (medium): A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow…