VYPR
← All advisories
High severity8.2NVD Advisory· Published Jan 15, 2026· Updated Jun 17, 2026

CVE-2025-67823

CVE-2025-67823

Description

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mitel/CX2 versions
    cpe:2.3:a:mitel:cx:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mitel:cx:*:*:*:*:*:*:*:*range: <2.0
    • (no CPE)range: <=1.1.0.1
  • Mitel/Micontact Center Business3 versions
    cpe:2.3:a:mitel:micontact_center_business:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mitel:micontact_center_business:*:*:*:*:*:*:*:*range: <10.2.0.11
    • (no CPE)range: <=10.2.0.10
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.