CVE-2024-41712

MEDIUM Year: 2024
CVSS v3 Score
6.6
Medium
Weakness Type
CWE-94
View all →

Vulnerability Description

A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a command injection attack, due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary commands on the system within the context of the user.

Related Vulnerabilities

CVE-2017-6325

MEDIUM
CVSS:6.6(Medium)

The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. ...

CWE-942017

CVE-2020-15171

MEDIUM
CVSS:6.6(Medium)

In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instanti...

CWE-942020

CVE-2023-31493

MEDIUM
CVSS:6.6(Medium)

RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing ex...

CWE-942023

CVE-2023-35701

MEDIUM
CVSS:6.6(Medium)

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution...

CWE-942023

CVE-2023-36022

MEDIUM
CVSS:6.6(Medium)

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CWE-942023

CVE-2023-39956

MEDIUM
CVSS:6.6(Medium)

Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command line executables are impacted. Specifically ...

CWE-942023