CVE-2025-27828 Information

Description

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 10.1.0.0 through 10.1.0.5 and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.

Reference

https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0003

Related CNNVD

CNNVD-202506-3085 (Published: 2025-06-24)