CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks
1 day ago · The two security defects, tracked as CVE-2024-41713 and CVE-2024-55550, are described as path traversal issues that impact versions 9.8 SP1 FP2 (9.8.1.201) and earlier of …
Mitel 0-day, 5-year-old Oracle RCE exploited in the wild
1 day ago · It now has a CVE but still no fix: "CVE-2024-55550, is substantially mitigated by MiCollab 9.8 SP2 (9.8.2.12)," according to Mitel's December 12 security advisory update. "This …
CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active ...
1 day ago · The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three flaws impacting Mitel MiCollab and Oracle WebLogic Server to its Known Exploited …
CISA warns of critical Oracle, Mitel flaws exploited in attacks
2 days ago · The U.S. cybersecurity agency also warned of a second Mitel MiCollab path traversal vulnerability (CVE-2024-55550), enabling authenticated attackers with admin privileges to read …
Critical Mitel, Oracle flaws find active exploitation, CISA urges ...
1 day ago · One of the Mitel flaws, tracked as CVE-2024-41713, is a critical (CVSS 9.8/10) path traversal vulnerability in the NuPoint Unified Messaging component of Mitel MiCollab that …
CISA Adds Three Known Exploited Vulnerabilities to Catalog
3 days ago · CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.. CVE-2024-41713 Mitel MiCollab Path …
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug
Dec 6, 2024 · updated A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive files …
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File …
Dec 5, 2024 · Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary …
Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024 …
Dec 5, 2024 · A SQL injection vulnerability has been identified in NuPoint Unified Messaging (NPM) component of Mitel MiCollab which, if successfully exploited, could allow a malicious …
Mitel MiCollab zero-day flaw gets proof-of-concept exploit
Dec 5, 2024 · Researchers have uncovered an arbitrary file read zero-day in the Mitel MiCollab collaboration platform, allowing attackers to access files on a server's filesystem.
- Some results have been removed