Vulnerability Database

314,453

Total vulnerabilities in the database

CVE-2024-47223

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.

  • Published: Oct 21, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-47223
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.4
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
mitel / micollab - 9.8.1.201.x