Advisory ID: 16-0012
Publish Date: 2016-06-03
A Cross-Site Scripting (XSS) Vulnerability was identified in MiCollab AWV.
Credit is given to Andrew Tierney, of Pen Test Partners, for the discovery and working with Mitel under coordinated disclosure.
The identified vulnerability would allow an attacker to inject malicious scripts into a specific web page which would then be unknowingly executed by other users (potential victims) when vising the page.
The following products have been identified as being affected and vulnerable (updated 2016-06-03):
|Product Name||Product Versions||Security Bulletin||Last Updated|
|MiCollab AWV||6.x, 5.x||16-0012-001||2016-06-03