Cross-Site Scripting Vulnerability in Mitel MiContact Center and CX Products
CVE-2025-67823
8.2HIGH
What is CVE-2025-67823?
A security flaw in the Multimedia Email component of Mitel MiContact Center Business and Mitel CX allows unauthenticated attackers to exploit insufficient input validation. This vulnerability can lead to Cross-Site Scripting (XSS) attacks when the email channel is enabled. By enticing a user to interact with a malicious payload, an attacker may execute arbitrary scripts within the user's browser or desktop client application, jeopardizing sensitive information and account integrity.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved