CVE-2020-24594

2020-09-2503:47:16

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.

References

www.mitel.com/support/security-advisories

www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010