Vendors / Extreme Networks Records 35 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 16
Exploited now Extreme Networks records in CISA KEV No Extreme Networks vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0058 · Published 2025-02-27 · No fix listed CWE-22
Priority MEDIUM 40
In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2025-02-27 · No fix listed CWE-284
Priority LOW 30
In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00301 · Published 2025-02-27 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
5 16 14 0 0
