CVE-2021-27402

MEDIUM 6.5CVE-2021-27402 · Published 13/08/2021 · updated 17/06/2026

In short

CVE-2021-27402 is a MEDIUM (CVSS 6.5) vulnerability affecting micollab (mitel).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.8% of all vulnerabilities.
Fix: update to 9.2 or later.

Package	Affected versions	Patched versions
micollab mitel	`= 9.2< 9.2`	`9.2`

Description

The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal.

References

mitel.com/support/security-advisories · Vendor Advisory
mitel.com/support/security-advisories/mitel-product-security-advisory-21-0004 · Vendor Advisory

More vulnerabilities in micollab

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

micollab

mitel

= 9.2< 9.2

9.2

More vulnerabilities in micollab

See all →