CVE-2024-35286

n/a / n/a PUBLISHED

Description (CNA)

A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary database and management operations.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0014

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.