VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Nov 12, 2019· Updated Jun 17, 2026

CVE-2018-18819

CVE-2018-18819

Description

A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202), and MiVoice Business Express versions 7.3 PR3 (7.3.1.302) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP1 (8.0.2.202), could allow creation of unauthorized chat sessions, due to insufficient access controls. A successful exploit could allow execution of arbitrary commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mitel/Micollab2 versions
    cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*range: >=7.3,<=7.3.0.601
    • (no CPE)range: <=7.3 PR6 (7.3.0.601), 8.0 through 8.0 SP2 FP2 (8.0.2.202)
  • Mitel/Mivoice Business Express
    cpe:2.3:a:mitel:mivoice_business_express:*:*:*:*:*:*:*:*
    Range: >=7.0,<=7.3.1.302
  • MiCollab/MiCollabllm-create
    Range: <=7.3 PR6 (7.3.0.601), 8.0 through 8.0 SP2 FP2 (8.0.2.202)
  • MiVoice Business Express/MiVoice Business Expressllm-create
    Range: <=7.3 PR3 (7.3.1.302), 8.0 through 8.0 SP2 FP1 (8.0.2.202)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.