CVE-2025-67823: XSS
A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67823?
CVE-2025-67823 has a moderate severity due to the potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2025-67823?
To fix CVE-2025-67823, update Mitel MiContact Center Business to version 10.2.0.11 or later and Mitel CX to version 1.1.0.2 or later.
What products are affected by CVE-2025-67823?
CVE-2025-67823 affects Mitel MiContact Center Business up to version 10.2.0.10 and Mitel CX up to version 1.1.0.1.
Can an unauthenticated user exploit CVE-2025-67823?
Yes, an unauthenticated attacker can exploit CVE-2025-67823 by conducting a Cross-Site Scripting (XSS) attack.
Is user interaction required to exploit CVE-2025-67823?
Yes, successful exploitation of CVE-2025-67823 requires user interaction.