https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-52914.htmlhttps://patchthecve.com/cve/CVE-2025-52914.htmlWed, 17 Jun 2026 09:37:16 +0000HIGH 8.8: A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQLhttps://patchthecve.com/cve/CVE-2024-55550.htmlhttps://patchthecve.com/cve/CVE-2024-55550.htmlTue, 04 Aug 2026 05:16:31 +0000LOW 2.7: Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access levehttps://patchthecve.com/cve/CVE-2024-47224.htmlhttps://patchthecve.com/cve/CVE-2024-47224.htmlWed, 17 Jun 2026 07:56:45 +0000MEDIUM 6.5: A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a CRLF injection attack due to inadequate encoding of user input in URLs. A successful exploit could allow an attacker to perfhttps://patchthecve.com/cve/CVE-2024-41714.htmlhttps://patchthecve.com/cve/CVE-2024-41714.htmlWed, 17 Jun 2026 07:48:06 +0000HIGH 8.8: A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful https://patchthecve.com/cve/CVE-2024-41713.htmlhttps://patchthecve.com/cve/CVE-2024-41713.htmlTue, 04 Aug 2026 05:16:30 +0000CRITICAL 9.1: A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attahttps://patchthecve.com/cve/CVE-2024-41712.htmlhttps://patchthecve.com/cve/CVE-2024-41712.htmlWed, 17 Jun 2026 07:48:06 +0000MEDIUM 6.6: A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a command injection attack, due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary commands on the system withhttps://patchthecve.com/cve/CVE-2024-35315.htmlhttps://patchthecve.com/cve/CVE-2024-35315.htmlWed, 17 Jun 2026 07:34:44 +0000MEDIUM 5.6: A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an authenticated attacker to conduct a privilege escalation attack due to improper file validation. A successful exploit could allow an attacker https://patchthecve.com/cve/CVE-2024-35314.htmlhttps://patchthecve.com/cve/CVE-2024-35314.htmlWed, 17 Jun 2026 07:34:44 +0000CRITICAL 9.8: A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit requires user https://patchthecve.com/cve/CVE-2024-35287.htmlhttps://patchthecve.com/cve/CVE-2024-35287.htmlWed, 17 Jun 2026 07:34:41 +0000MEDIUM 6.7: A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allow an authenticated attacker with administrative privilege to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful explohttps://patchthecve.com/cve/CVE-2024-35286.htmlhttps://patchthecve.com/cve/CVE-2024-35286.htmlWed, 17 Jun 2026 07:34:41 +0000CRITICAL 9.8: A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary databahttps://patchthecve.com/cve/CVE-2024-35285.htmlhttps://patchthecve.com/cve/CVE-2024-35285.htmlWed, 17 Jun 2026 07:34:41 +0000CRITICAL 9.8: A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization.https://patchthecve.com/cve/CVE-2024-30160.htmlhttps://patchthecve.com/cve/CVE-2024-30160.htmlWed, 17 Jun 2026 07:26:23 +0000MEDIUM 4.8: A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored Cross-Site Scripting (XSS) attack due to insufficient validation of user input. A successful exploit could allow ahttps://patchthecve.com/cve/CVE-2024-30159.htmlhttps://patchthecve.com/cve/CVE-2024-30159.htmlWed, 17 Jun 2026 07:26:23 +0000MEDIUM 4.8: A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored Cross-Site Scripting (XSS) attack due to insufficient validation of user input. A successful exploit could allow an attacker https://patchthecve.com/cve/CVE-2024-30158.htmlhttps://patchthecve.com/cve/CVE-2024-30158.htmlWed, 17 Jun 2026 07:26:23 +0000HIGH 7.2: A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitraryhttps://patchthecve.com/cve/CVE-2024-30157.htmlhttps://patchthecve.com/cve/CVE-2024-30157.htmlWed, 17 Jun 2026 07:26:22 +0000HIGH 7.2: A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to executhttps://patchthecve.com/cve/CVE-2024-47912.htmlhttps://patchthecve.com/cve/CVE-2024-47912.htmlWed, 17 Jun 2026 07:57:58 +0000HIGH 8.2: A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to perform unauthorized data-access attacks due to missing authentication mechanisms. A successful exploit could allow an attacker to achttps://patchthecve.com/cve/CVE-2024-47223.htmlhttps://patchthecve.com/cve/CVE-2024-47223.htmlWed, 17 Jun 2026 07:56:45 +0000CRITICAL 9.4: A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access https://patchthecve.com/cve/CVE-2024-47189.htmlhttps://patchthecve.com/cve/CVE-2024-47189.htmlWed, 17 Jun 2026 07:56:41 +0000HIGH 7.7: The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL injection due to insufficient sanitization of user input. A successful exploit could allow an attacker with knowledge of