Mitel MiCollab SQL Injection Vulnerability Advisory (CVE-2024-47223)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: MiCollab SQL Injection Vulnerability - Vulnerability ID: MISA-2024-0028 - Release Date: 2024-10-09 - Update Date: 2024-10-09 - Revision Version: 1.0 2. Vulnerability Impact: - Affected Product: MiCollab - Affected Versions: 9.8 SP1 FP2 (9.8.1.201) and earlier versions - Solution: Upgrade to MiCollab 9.8 SP2 (9.8.2.12) or later. Mitel provides patches for 9.8 (9.8.0.33), MiCollab 9.8 SP1 (9.8.1.5), and 9.8SP1FP1 (9.8.1.201). Refer to the KMS article for instructions. 3. Vulnerability Severity: - Severity: Critical / 9.4 - CVSS 3.1 Base Score: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H 4. Mitigation Measures: - Recommended Action: Affected users should upgrade to a subsequent version of the affected release. - Contact Support: If unable to access the above links, contact a Mitel authorized partner or Mitel Product Support. 5. Related CVE/CWE/Advisories: - Related CVE: CVE-2024-47223 6. Revision History: - Revision Version: 1.0 - Release Date: 2024-10-09 - Description: Initial release This information provides a detailed description of the MiCollab SQL injection vulnerability, including affected products, versions, solutions, severity, mitigation measures, and related CVE/CWE/advisories.

Goal Reached Thanks to every supporter — we hit 100%!

Mitel MiCollab SQL Injection Vulnerability Advisory (CVE-2024-47223)