Security Advisory

CVE-2020-12679

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-07 16:36:31

Last updated 2024-08-04 12:04:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATH_INFO to home.php.

← Browse all CVEs View on cve.org ↗