High severity7.1NVD Advisory· Published Jun 24, 2025· Updated Jun 17, 2026
CVE-2025-27828
CVE-2025-27828
Description
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=10.0.0.4, 10.1.0.0-10.1.0.5, 10.2.0.0-10.2.0.4
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.