Security Advisory
CVE-2019-9591
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.