Reflected XSS Vulnerability in Mitel ShoreTel Conference Web Application
CVE-2020-12679

6.1MEDIUM

Key Information:

Vendor: Mitel
Status: Shoretel Conference Web; Mivoice Connect
Vendor: CVE Published:; 7 May 2020

What is CVE-2020-12679?

This vulnerability in the Mitel ShoreTel Conference Web Application allows remote attackers to execute arbitrary JavaScript and HTML code. By manipulating the PATH_INFO parameter to home.php, an attacker can exploit this reflected cross-site scripting (XSS) flaw to craft malicious payloads, potentially compromising sensitive user information or credentials.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://gist.github.com/kampji/5ade2d15817650a725aa89fa2e...

x_refsource_MISC

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 7, 2020
Vulnerability Reserved
May 6, 2020

JSON

Mitel

What is CVE-2020-12679?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.