CVE-2021-27401: XSS
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting (XSS).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-27401?
CVE-2021-27401 is a vulnerability in Mitel MiCollab Web Client that allows an attacker to access and modify user data through Cross-Site Scripting (XSS).
How does CVE-2021-27401 affect Mitel MiCollab Web Client?
CVE-2021-27401 affects Mitel MiCollab Web Client versions up to and including 9.2 FP1 by allowing an attacker to execute arbitrary code and access user data.
What is the severity of CVE-2021-27401?
CVE-2021-27401 has a severity keyword of 'medium' and a severity value of 6.1.
How can I fix CVE-2021-27401?
To fix CVE-2021-27401, it is recommended to upgrade to Mitel MiCollab Web Client version 9.2 FP2 or later.
Where can I find more information about CVE-2021-27401?
More information about CVE-2021-27401 can be found on Mitel's support website: [https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0004](https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0004)