Vulnerability in ShoreTel Conferencing Platform

Type: Advisory

Vulnerability in ShoreTel Conferencing Platform

Security Advisory SCWX-2018-001

A vulnerability in the ShoreTel platform (CVE-2018-12901) could allow an attacker to create a specially crafted URL that gives them the ability to execute arbitrary code in a victim’s browser if the victim clicks the link. Read the full summary.

Print Share Comment Cite Upload Translate

APA

() » Vulnerability in ShoreTel Conferencing Platform. Retrieved from https://www.truth.cx/2018/12/20/vulnerability-in-shoretel-conferencing-platform/.

MLA

" » Vulnerability in ShoreTel Conferencing Platform." - , https://www.truth.cx/2018/12/20/vulnerability-in-shoretel-conferencing-platform/

HARVARD

» Vulnerability in ShoreTel Conferencing Platform., viewed ,

VANCOUVER

- » Vulnerability in ShoreTel Conferencing Platform. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2018/12/20/vulnerability-in-shoretel-conferencing-platform/

CHICAGO

" » Vulnerability in ShoreTel Conferencing Platform." - Accessed . https://www.truth.cx/2018/12/20/vulnerability-in-shoretel-conferencing-platform/

IEEE

" » Vulnerability in ShoreTel Conferencing Platform." [Online]. Available: https://www.truth.cx/2018/12/20/vulnerability-in-shoretel-conferencing-platform/. [Accessed: ]

Select a language: Afrikaans Albanian Arabic Armenian Basque Bengali Bulgarian Catalan Cambodian Chinese (Mandarin) Croatian Czech Danish Dutch English Estonian Fiji Finnish French Georgian German Greek Gujarati Hebrew Hindi Hungarian Icelandic Indonesian Irish Italian Japanese Javanese Korean Latin Latvian Lithuanian Macedonian Malay Malayalam Maltese Maori Marathi Mongolian Nepali Norwegian Persian Polish Portuguese Punjabi Quechua Romanian Russian Samoan Serbian Slovak Slovenian Spanish Swahili Swedish Tamil Tatar Telugu Thai Tibetan Tonga Turkish Ukrainian Urdu Uzbek Vietnamese Welsh Xhosa Type: Advisory</br><h2>Vulnerability in ShoreTel Conferencing Platform</h2><p>Security Advisory SCWX-2018-001</p><a href='https://www.secureworks.com/research/advisory-2018-001'><img src='https://www.secureworks.com//pcdnscwx001.azureedge.net/~/media/Images/Insights/People/people_0041_manonphone/people_0041_manonphone_360x190.ashx?modified=20151112011100' /></a><br/><br/>A vulnerability in the ShoreTel platform (CVE-2018-12901) could allow an attacker to create a specially crafted URL that gives them the ability to execute arbitrary code in a victim’s browser if the victim clicks the link. Read the full summary. First name:

Last name: