Mitel OpenScape: Schwachstelle ermöglicht Cross-Site Scripting
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Mitel OpenScape ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-24820 linked CVEs
Open advisory with all CVEs
More on OpenScape
Other advisories
- Highbsi:WID-SEC-2026-4225Mitel OpenScape Endpoint Management: Mehrere Schwachstellen
- Highbsi:WID-SEC-2026-2482Mitel OpenScape: Schwachstelle ermöglicht Cross-Site Scripting
- CriticalCVE-2023-40266Mitel Unify Openscape Xpressions Webassistant: Pfadüberschreitung (Path Traversal)
- HighCVE-2023-40265Mitel Unify Openscape Xpressions Webassistant: Remote Code Execution (RCE)
- MediumCVE-2023-40264Unify Openscape Voice Trace Manager: Pfadüberschreitung (Path Traversal)
- MediumCVE-2023-40264Unify Openscape Voice Trace Manager: Pfadüberschreitung (Path Traversal)
- HighCVE-2023-40265Mitel Unify Openscape Xpressions Webassistant: Remote Code Execution (RCE)
- CriticalCVE-2023-40266Mitel Unify Openscape Xpressions Webassistant: Pfadüberschreitung (Path Traversal)
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2482
ID