CVE-2020-24692

CVE-2020-24692 affects the Ignite portal in Mitel MiContact Center Business prior to 9.3.0.0. The issue is insufficient input validation allowing cross-site scripting (XSS), which could let an attacker execute arbitrary scripts and potentially gain access to a user session. The description and co...

CVE-2020-24693

The Mitel MiContact Center Business Ignite portal is affected by CVE-2020-24693, with the Ignite portal vulnerability located in the MiContact Center’s Ignite component prior to version 9.3.0.0. The root cause is insufficient output sanitization, which could allow a local attacker to view system ...

CVE-2025-67823

CVE-2025-67823 affects Mitel MiContact Center Business up to version 10.2.0.10 and Mitel CX up to 1.1.0.1. The vulnerability is in the Multimedia Email component and stems from insufficient input validation, enabling an unauthenticated attacker to perform a Cross-Site Scripting (XSS) attack. A su...