CVE-2024-41712

A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a command injection attack, due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary commands on the system within the context of the user.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*

History

24 Jun 2025, 01:30

Type Values Removed Values Added
First Time Mitel
Mitel micollab
CPE cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*
References () https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0022 - () https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0022 - Vendor Advisory

21 Oct 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-21 21:15

Updated : 2025-06-24 01:30


NVD link : CVE-2024-41712

Mitre link : CVE-2024-41712


JSON object : View

Products Affected

mitel

  • micollab
CWE

No CWE.