Multiple Vulnerabilities in MiCollab and MiCollab AWV

Advisory ID: 17-0010
Publish Date: 2017-09-14
Revision: 1.0


Multiple vulnerabilities have been identified and corrected in MiCollab and MiCollab AWV.

Detailed Description

Various web application defects have been corrected in MiCollab and MiCollab AWV. These vulnerabilities, if unmitigated, could lead to the compromise of user credentials, database data, and session data, and allow a malicious actor to execute arbitrary system commands.

Please refer to the security bulletins below for details on the corrected vulnerabilities.

Affected Products

Security Bulletins are being issued for the following products:

Product Name Product Versions Security Bulletin Last Updated 
 MiCollab 7.3 PR2 ( and earlier
7.2 ( and earlier
7.1 ( and earlier  
MiCollab AWV 6.3 PR1 ( and earlier
6.2 ( and earlier
6.1 ( and earlier


Risk Assessment

The risk associated with these vulnerabilities in the noted products is considered medium to high.

Refer to product Security Bulletins for additional statements regarding risk.

Mitigation / Recommended Action

Mitel has issued new releases of the affected software applications. Customers are advised to update their software to the latest versions.

Refer to the associated Security Bulletin for solution information.

External References

Related CVEs / CWEs / Advisories


Möchten Sie mit unserem Sales Team sprechen?