Browse CVEs

MEDIUM 6.1 CVE-2020-13820 Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request. Extreme Management Center Mitigation only Fix from $1,6002020-08-03 HIGH 8.1 CVE-2017-14332 Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values. Extremexos Mitigation only Fix from $1,9502017-10-23 HIGH 7.5 CVE-2017-14328 Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot. Extremexos Mitigation only Fix from $1,9502017-10-23 MEDIUM 6.7 CVE-2017-14329 Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell. Extremexos Mitigation only Fix from $1,6002017-10-23 MEDIUM 6.7 CVE-2017-14330 Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process. Extremexos No fix yet Fix from $1,6002017-10-23 MEDIUM 6.7 CVE-2017-14331 Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell. Extremexos Mitigation only Fix from $1,6002017-10-23 MEDIUM 5.4 CVE-2013-7309 The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA… Exos Mitigation only Fix from $1,6002014-01-23