Skip to content

Mitel · weakness class

SQL Injection

7 CVEs

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

check available
1

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Mitel MiCollab <= 9.8.0.33 - SQL InjectionCVE-2024-35286Mitel · CVSS 9.8 · 66% likely

    CWE-89

  2. A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection a…CVE-2025-52914Mitel · CVSS 8.8 · 0.7% likely

    CWE-89

  3. A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and…CVE-2023-39292Mitel · CVSS 9.8 · 0.6% likely

    CWE-89

  4. A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL…CVE-2024-47223Mitel · CVSS 9.4 · 0.5% likely

    CWE-89

  5. The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL…CVE-2024-47189Mitel · CVSS 7.7 · 0.4% likely

    CWE-89

  6. A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injecti…CVE-2024-30158Mitel · CVSS 7.2 · 0.4% likely

    CWE-89

  7. A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a…CVE-2024-30157Mitel · CVSS 7.2 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in