CVE-2020-28351

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS)…

published November 9, 2020

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack (via the PATH_INFO to index.php) due to insufficient validation for the time_zone object in the HOME_MEETING& page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15987 · 96.9th percentile
Published
2020-11-09T03:58Z
EPSS history
Timeline
  • 09 NOV 03:58Z
    The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS)…
    cvelistv5