CVE-2024-35286
97Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 9.8epss 65%
from disclosure to weapon46 days
Published on NVDOct 21
1st PoC+46d
VulnCheck+50d
exploitation probability
65%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary database and management operations.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 1
githubgithub.com/lu4m575/CVE-2024-35286_scan.nse★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.