CVE-2018-16226

Affected product: Mitel MiVoice Office 400 web admin component. Vulnerability: reflected cross-site scripting (XSS) due to insufficient validation on the start.asp page in versions R5.0 HF3 (v8839a1) and earlier. Impact: unauthenticated attacker could execute arbitrary scripts and access sensitiv...