CISA warns of critical Oracle, Mitel flaws exploited in attacks
2 days ago · CISA has warned U.S. federal agencies to secure their systems against critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems that are actively exploited in attacks.
CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks
1 day ago · The two security defects, tracked as CVE-2024-41713 and CVE-2024-55550, are described as path traversal issues that impact versions 9.8 SP1 FP2 (9.8.1.201) and earlier of Mitel MiCollab. CVE-2024-41713 (CVSS score of 9.8) is a critical bug that could allow unauthenticated attackers to gain access to provisioning information and to perform ...
CISA Warns of Three Vulnerabilities Actively Exploited in Attacks
2 days ago · Mitel MiCollab Vulnerabilities. Two of the vulnerabilities impact Mitel MiCollab, a widely used unified communications platform: ... Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications. ...
Mitel 0-day, 5-year-old Oracle RCE bug under active exploit - MSN
The two Mitel flaws affect the vendor's MiCollab product in versions 9.8 SP1 FP2 (9.8.1.201) and earlier. Both are path traversal vulnerabilities, with one (CVE-2024-41713) receiving a critical 9. ...
Critical Mitel, Oracle flaws find active exploitation, CISA urges ...
1 day ago · One of the Mitel flaws, tracked as CVE-2024-41713, is a critical (CVSS 9.8/10) path traversal vulnerability in the NuPoint Unified Messaging component of Mitel MiCollab that could allow an ...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
3 days ago · CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.. CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability; CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability; CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability; Users and administrators are also encouraged to review the Palo Alto Threat ...
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug
Dec 6, 2024 · updated A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive files on vulnerable instances.
Critical Mitel MiCollab Flaw Exposes Systems to ... - The Hacker News
Dec 5, 2024 · Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances.
Mitel MiCollab zero-day flaw gets proof-of-concept exploit
Dec 5, 2024 · Researchers have uncovered an arbitrary file read zero-day in the Mitel MiCollab collaboration platform, allowing attackers to access files on a server's filesystem.
Mitel MiCollab VoIP authentication bypass opens new attack paths
Dec 5, 2024 · The Mitel MiCollab enterprise collaboration and VoIP suite includes features such as voice, video, chat messaging, SMS, web conferencing, desktop sharing, file sharing, and other tools.
- Some results have been removed