CVE-2020-25606

MEDIUM

Mitel MiCollab < 9.2 - Cross-Site Scripting in AWV Component

Title source: llm

Description

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.mitel.com/support/security-advisories

Scores

CVSS v3 6.1

EPSS 0.0063

EPSS Percentile 45.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-20 CWE-79

Status published

Products (1)

mitel/micollab < 9.2

Published Dec 18, 2020

Tracked Since Feb 18, 2026