Security Advisory

CVE-2025-27828

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-24 00:00:00

Last updated 2025-06-24 14:41:18

Assigner mitre

State PUBLISHED

Description

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.

← Browse all CVEs View on cve.org ↗