Security Advisory

CVE-2019-9591

6.1
MEDIUM

Vulnerability Description

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.
Published Date March 6, 2019
Official Source NIST NVD Advisory