CVE-2024-35286
CRITICAL EXPLOITED NUCLEIMitel Micollab < 9.8.0.33 - SQL Injection
Title source: ruleDescription
A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary database and management operations.
Exploits (1)
Nuclei Templates (1)
Mitel MiCollab <= 9.8.0.33 - SQL Injection
CRITICALVERIFIEDby daffainfo
Shodan:
html:"Mitel" html:"MiCollab"
Scores
CVSS v3
9.8
EPSS
0.6377
EPSS Percentile
98.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
VulnCheck KEV
2024-12-10
CWE
CWE-89
Status
published
Products (1)
mitel/micollab
< 9.8.0.33
Published
Oct 21, 2024
Tracked Since
Feb 18, 2026