Critical severity9.6NVD Advisory· Published Sep 25, 2020· Updated Jun 17, 2026
CVE-2020-24594
CVE-2020-24594
Description
Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:mitel:micloud_management_portal:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:mitel:micloud_management_portal:*:*:*:*:*:*:*:*range: <=6.0
- cpe:2.3:a:mitel:micloud_management_portal:6.1:-:*:*:*:*:*:*
- cpe:2.3:a:mitel:micloud_management_portal:6.1:sp4:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <6.1 SP5
Patches
Vulnerability mechanics
References
2- www.mitel.com/support/security-advisoriesnvdVendor Advisory
- www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010nvdVendor Advisory
News mentions
0No linked articles in our index yet.