The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user information and application data.
CPE | Name | Operator | Version |
---|---|---|---|
businesscti_enterprise | ge | 7.0.0 | |
businesscti_enterprise | lt | 7.0.3 | |
businesscti_enterprise | lt | 6.4.11 |