CVE-2020-12456

HIGH 8.8CVE-2020-12456 · Published 26/08/2020 · updated 17/06/2026

In short

CVE-2020-12456 is a HIGH (CVSS 8.8) vulnerability affecting mivoice connect client (mitel).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.6% of all vulnerabilities.
Fix: update to 214.100.1223.0 or later.

Package	Affected versions	Patched versions
mivoice connect client mitel	`< 214.100.1223.0`	`214.100.1223.0`

Description

A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform directory traversal, and execute arbitrary scripts in the context of the Connect client.

References

mitel.com/support/security-advisories · Vendor Advisory
mitel.com/support/security-advisories/mitel-product-security-advisory-20-0006 · Vendor Advisory

More vulnerabilities in mivoice connect client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free