CVE search · CVE-2025-52914

CVE-2025-52914

high 8.8

A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQL database commands.

Open in the NVD CVE.org JSON

Status: Analyzed
Published: 2025-08-08
Last changed: 2026-06-17
Source: cve@mitre.org
Weakness: CWE-89

Severity

Version	Score	Vector	Source
CVSS 3.1	high 8.8	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`	nvd@nist.govPrimary
CVSS 3.1	high 8.8	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`	134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

mitel · micollab

References

https://www.mitel.com/support/security-advisoriesVendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0008Vendor Advisory

CVE-2025-52914

Details

Severity

Affected products

References