CVE-2024-30160

A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored Cross-Site Scripting (XSS) attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary scripts.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2024-10-21

Last modified

2025-03-22

Weaknesses

CWE-79

Affected products

• Micollab (Mitel)

References

• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0005