PatchTheCVECVE-2024-47189: The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 F
CVE-2024-47189 is a high-severity flaw (CVSS 7.7) affecting micollab. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL injection due to insufficient sanitization of user input. A successful exploit could allow an attacker with knowledge of specific details to access non-sensitive user provisioning information and execute arbitrary SQL database commands.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.7 (High) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 64%) |
| CISA exploited list | No |
| Weakness | CWE-89 |
| Published | 2024-10-21 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-47189?
micollab: upgrade to newer than 9.8.1.201. Exact commands for each OS are on this page.
Is CVE-2024-47189 being exploited?
CVE-2024-47189 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-47189 affect?
CVE-2024-47189 affects micollab. Severity is high (CVSS 7.7). The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL injection due to insufficient sanitization of user input. A
How urgent is CVE-2024-47189?
Priority 41/100. High severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2024-55550 LOW 2.7 EXPLOITED UPGRADE Mitel MiCollab Path Traversal Vulnerability
- CVE-2024-41713 CRITICAL 9.1 EXPLOITED UPGRADE Mitel MiCollab Path Traversal Vulnerability
- CVE-2025-52914 HIGH 8.8 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.10
- CVE-2024-47912 HIGH 8.2 UPGRADE A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP
- CVE-2024-47224 MEDIUM 6.5 UPGRADE A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2