CVE-2025-52914

Descripción

A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQL database commands.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://www.mitel.com/support/security-advisories Vendor Advisory
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0008 Vendor Advisory