Unrated severityNVD Advisory· Published Jan 15, 2026· Updated Jan 16, 2026
CVE-2025-67823
CVE-2025-67823
Description
A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=10.2.0.10
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.