Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-27828

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mitel MiContact Center Business是加拿大敏迪（Mitel）公司的一款全媒体联络中心平台。该平台应用于客户沟通，生产管理等场景。 Mitel MiContact Center Business 10.0.0.4及之前版本、10.1.0.0至10.1.0.5版本和10.2.0.0至10.2.0.4版本存在安全漏洞，该漏洞源于遗留聊天组件输入验证不足，可能导致反射型跨站脚本攻击。

AI Predicted 4.3 Difficulty: Moderate EPSS 0.36% · P29
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-27828

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Mitel MiContact Center Business 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mitel MiContact Center Business是加拿大敏迪（Mitel）公司的一款全媒体联络中心平台。该平台应用于客户沟通，生产管理等场景。 Mitel MiContact Center Business 10.0.0.4及之前版本、10.1.0.0至10.1.0.5版本和10.2.0.0至10.2.0.4版本存在安全漏洞，该漏洞源于遗留聊天组件输入验证不足，可能导致反射型跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2025-27828

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-27828

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-27828 (1)

Same Patch Batch · n/a · 2025-06-24 · 16 CVEs total

CVE-2025-6536 3.3 LOW Tarantool datetime.c tm_to_datetime assertion
CVE-2025-27827 Mitel MiContact Center Business 安全漏洞
CVE-2025-44531 Realtek RTL8762EKF-EVB RTL8762E SDK 安全漏洞
CVE-2025-50699 PHPGurukul Online DJ Booking Management System 安全漏洞
CVE-2025-50695 PHPGurukul Online DJ Booking Management System 安全漏洞
CVE-2025-50693 PHPGurukul Online DJ Booking Management System 安全漏洞
CVE-2025-32975 Quest Software KACE Systems Management Appliance 安全漏洞
CVE-2025-32977 Quest KACE Systems Management Appliance 安全漏洞
CVE-2025-32978 Quest KACE Systems Management Appliance 访问控制错误漏洞
CVE-2025-32976 Quest KACE Systems Management Appliance 安全漏洞
CVE-2024-37743 KnowledgeGPT 安全漏洞
CVE-2024-56917 Netbox 安全漏洞
CVE-2024-56916 Netbox 安全漏洞
CVE-2024-56918 Netbox 安全漏洞
CVE-2021-41691 OS4Ed OpenSIS 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-27828

No comments yet

Leave a comment