Skip to content

Extremenetworks vulnerabilities

Products

Newest

extreme networks iq engine Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5,... CVE-2023-46273 8.8 HighSeptember 14, 2026
extreme networks extremecloud iq - site engine, extremenetworks extremecloud iq site engine +1 more XIQ‑SE NAC Admin Credential Exposure via HTTP Response CVE-2026-0689 6.0 MediumMarch 2, 2026
extreme networks fabric engine (voss), extremenetworks fabric engine \(voss\) +1 more Fabric Engine (VOSS) AutoSense Authentication Bypass CVE-2025-11192 8.4 HighOctober 7, 2025
extreme networks extremeguest essentials ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force CVE-2025-8679 7.6 HighOctober 1, 2025
extreme networks extremecontrol ExtremeControl (NAC) 'onmouseover' XSS CVE-2025-6235 5.3 MediumJuly 21, 2025
extreme networks extremecloud universal ztna ExtremeCloud Universal ZTNA Improper Authorization CVE-2025-6083 5.2 MediumJune 13, 2025
extremenetworks xiq-se In XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible,... CVE-2024-38292 9.8 CriticalFebruary 27, 2025
extremenetworks xiq-se In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which... CVE-2024-38291 8.8 HighFebruary 27, 2025
extremenetworks xiq-se In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific... CVE-2024-38290 5.3 MediumFebruary 27, 2025
extremenetworks extremeos The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not... CVE-2023-40457 Disputed No scoreNovember 10, 2024
extremenetworks exos, extremexos +1 more Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its... CVE-2020-18305 8.0 HighMay 13, 2024
extremenetworks extremexos In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted... CVE-2024-27453 8.6 HighMay 3, 2024
extremenetworks exos A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch... CVE-2023-43121 7.5 HighOctober 16, 2023
extremenetworks exos An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and... CVE-2023-43120 8.8 HighOctober 16, 2023
extremenetworks exos An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also... CVE-2023-43119 9.8 CriticalOctober 16, 2023
extremenetworks exos Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch... CVE-2023-43118 8.8 HighOctober 16, 2023
extremenetworks iq engine IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow. CVE-2023-35803 Public exploit 9.8 CriticalOctober 4, 2023
extremenetworks iq engine IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation... CVE-2023-35802 9.8 CriticalJuly 15, 2023
extremenetworks aerohive netconfig The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and... CVE-2020-16152 Public exploit EPSS 35.5% 9.8 CriticalNovember 14, 2021
extremenetworks extreme management center Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET... CVE-2020-13819 6.1 MediumAugust 5, 2020
extremenetworks extreme management center Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected... CVE-2020-16847 6.1 MediumAugust 4, 2020
extremenetworks extreme management center Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET... CVE-2020-13820 6.1 MediumAugust 3, 2020
extremenetworks extremewireless wing An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x... CVE-2018-5797 7.5 HighFebruary 5, 2018
extremenetworks extremewireless wing An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x... CVE-2018-5787 7.5 HighFebruary 5, 2018
extremenetworks extremexos Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining... CVE-2017-14332 8.1 HighOctober 23, 2017
extremenetworks extremexos Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell"... CVE-2017-14331 6.7 MediumOctober 23, 2017
extremenetworks extremexos Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors... CVE-2017-14330 6.7 MediumOctober 23, 2017
extremenetworks extremexos Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors... CVE-2017-14329 6.7 MediumOctober 23, 2017
extremenetworks extremexos Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow... CVE-2017-14328 7.5 HighOctober 23, 2017
extremenetworks extremexos Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files. CVE-2017-14327 4.4 MediumOctober 23, 2017
extremenetworks exos The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate... CVE-2013-7309 5.4 MediumJanuary 23, 2014
extremenetworks extremeware xos Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11... CVE-2005-1670 4.6 MediumMay 19, 2005