+31 88 235 6483
+31 88 235 6483
Contact Center
Samenwerken
Zakelijke telefoonsystemen
Devices & accessoires
Vragen of opmerkingen?
+31 88 235 6483
Uw zakelijke behoefte
Uw branche
Organisatiegrootte
Onze diensten
Onze producten
Support voor klanten
Trainingen voor klanten
Partner support
Contact
Vragen of opmerkingen?
+31 88 235 6483
Blog
Over Mitel
Vacatures
Case studies
Resource center
Advisory ID: 16-0012
Publish Date: 2016-06-03
Revision: 1.0
Summary
A Cross-Site Scripting (XSS) Vulnerability was identified in MiCollab AWV.
Credit is given to Andrew Tierney, of Pen Test Partners, for the discovery and working with Mitel under coordinated disclosure.
Detailed Description
The identified vulnerability would allow an attacker to inject malicious scripts into a specific web page which would then be unknowingly executed by other users (potential victims) when vising the page.
Affected Products
The following products have been identified as being affected and vulnerable (updated 2016-06-03):
| Product Name | Product Versions | Security Bulletin | Last Updated |
| MiCollab AWV | 6.x, 5.x | 16-0012-001 | 2016-06-03 |
External References
n/a
n/a