CVE-2023-25599

CVSS V2 None CVSS V3 None
Description
A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x through 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the test_presenter.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
Overview
  • CVE ID
  • CVE-2023-25599
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-24T21:15:11
  • Last Modified Date
  • 2023-05-24T21:15:11
History
Created Old Value New Value Data Type Notes
2023-05-24 22:00:26 Added to TrackCVE