CVE-2020-25606: Input Validation
Published Dec 18, 2020
·Updated
The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS.
Affected Software
1 affected component
Mitel MiCollab<9.2
Event History
Dec 18, 2020
CVE Published
via MITRE·07:12 AM
Data Sourced
via MITRE·07:12 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-25606.
2
What is the title of the vulnerability?
The title of the vulnerability is "The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by...".
3
What is the severity of CVE-2020-25606?
The severity of CVE-2020-25606 is medium with a CVSS score of 6.1.
4
Which software is affected by CVE-2020-25606?
The software affected by CVE-2020-25606 is Mitel MiCollab before version 9.2 and MiVoice Business Express before version 9.2.
5
How can an attacker exploit CVE-2020-25606?
An attacker can exploit CVE-2020-25606 by sending arbitrary code to the AWV component of Mitel MiCollab before version 9.2, which can allow them to view system information due to improper input validation (XSS).