| Package | Affected versions | Patched versions |
|---|---|---|
| micollab | ≤ 9.8.1.5 | |
| mivoice business solution virtual instance | ≤ 1.0.0.27 |
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges within the context of the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free