Veille CVE

Mardi 7 janvier 2025

3 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2024-55550 – Non évaluée Exploitée Rançongiciel

    Mitel MiCollab

    Mitel MiCollab Path Traversal Vulnerability — Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

  2. CVE-2024-41713 – Non évaluée Exploitée Rançongiciel

    Mitel MiCollab

    Mitel MiCollab Path Traversal Vulnerability — Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

  3. CVE-2020-2883 – Non évaluée Exploitée

    Oracle WebLogic Server

    Oracle WebLogic Server Unspecified Vulnerability — Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.