CVE-2024-28070: Mitel Micontact Center Business

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit could allow an attacker to access sensitive information and gain unauthorized access.

Affected products

• Mitel Micontact Center Business: up to and including 10.0.0.4

Published 2024-03-16. Last modified 2026-06-17.