CVE-2019-19371: XSS
A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19371?
CVE-2019-19371 is considered a moderate severity vulnerability due to its ability to allow reflected cross-site scripting attacks.
How do I fix CVE-2019-19371?
To mitigate CVE-2019-19371, upgrade the Mitel MiCollab AWV to version 8.1.2.2 or later.
Which versions of Mitel MiCollab are affected by CVE-2019-19371?
Mitel MiCollab versions prior to 8.1.2.2, including 8.0.2.301 and from 8.1.0 to 8.1.1.11, are affected by CVE-2019-19371.
Can an attacker exploit CVE-2019-19371 without authentication?
Yes, an unauthenticated attacker can exploit CVE-2019-19371 due to insufficient validation in the join meeting interface.
What type of attack does CVE-2019-19371 facilitate?
CVE-2019-19371 facilitates reflected cross-site scripting (XSS) attacks.