Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-23	CVE-2018-16226	Cross-site Scripting vulnerability in Mitel Mivoice Office 400 R5.0 A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack, due to insufficient validation for the start.asp page. network low complexity mitel CWE-79	6.1