high7.1
CVE-2025-27828
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 coul…
Impact
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitel | Mitel MiContact Center Business | through 10.0.0.4 |
| 10.1.0.0 | through 10.1.0.5 | |
| And 10.2.0.0 | through 10.2.0.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.