PatchTheCVEmicollab vulnerabilities and fixes
Recent CVEs affecting micollab, with upgrade or downgrade steps. 18 tracked.
micollab has 18 tracked vulnerabilities, 5 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 18. Most recent: 2025-08-08. Highest priority: CVE-2024-41713 (score 100/100).
- CVE-2024-55550 LOW 2.7 EXPLOITED UPGRADE Mitel MiCollab Path Traversal Vulnerability
- CVE-2024-41713 CRITICAL 9.1 EXPLOITED UPGRADE Mitel MiCollab Path Traversal Vulnerability
- CVE-2025-52914 HIGH 8.8 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.10
- CVE-2024-47912 HIGH 8.2 UPGRADE A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP
- CVE-2024-47224 MEDIUM 6.5 UPGRADE A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2
- CVE-2024-47223 CRITICAL 9.4 UPGRADE A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2
- CVE-2024-47189 HIGH 7.7 UPGRADE The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 F
- CVE-2024-41714 HIGH 8.8 UPGRADE UPGRADE A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Busines
- CVE-2024-41712 MEDIUM 6.6 UPGRADE A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticat
- CVE-2024-35315 MEDIUM 5.6 UPGRADE DOWNGRADE A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtu
- CVE-2024-35314 CRITICAL 9.8 UPGRADE DOWNGRADE A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtu
- CVE-2024-35287 MEDIUM 6.7 UPGRADE A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) c
- CVE-2024-35286 CRITICAL 9.8 UPGRADE A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attack
- CVE-2024-35285 CRITICAL 9.8 UPGRADE A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attack
- CVE-2024-30160 MEDIUM 4.8 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow a
- CVE-2024-30159 MEDIUM 4.8 UPGRADE A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authentic
- CVE-2024-30158 HIGH 7.2 UPGRADE A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authentic
- CVE-2024-30157 HIGH 7.2 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow a
FAQ
How do I fix micollab vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is micollab being exploited right now?
Yes: 2 micollab CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.
Which micollab CVE should I patch first?
CVE-2024-41713 currently ranks highest (100/100): Mitel MiCollab Path Traversal Vulnerability.