CVE-2024-47223: Mitel MiCollab

Critical severity, CVSS 9.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access non-sensitive user provisioning information and execute arbitrary SQL database commands.

Affected products

• Mitel MiCollab: up to and including 9.8.1.201

Published 2024-10-21. Last modified 2026-06-17.