CVE-2019-19371 - A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface

Back Back to CVE browser

MEDIUM

A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface

Published Mar 2, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 1.04%

Description

A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8992
Advisory
https://www.mitel.com/support/security-advisories
x_refsource_MISCVendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8992		Advisory
https://www.mitel.com/support/security-advisories		x_refsource_MISCVendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007		x_refsource_CONFIRMVendor Advisory