Read the docs

ExtremePacs

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

ExtremePacs records in CISA KEV

No ExtremePacs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Extreme Xds 1 record LOW

Records

4 records

TI-2023-05978 CVE-2023-6523 · GHSA-qhq3-q3p4-4fxm

IDOR in ExtremePacs's Extreme XDS

Priority MEDIUM 41

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00566 Published 2024-04-05 Fixed in 3914 CWE-639
TI-2024-04043 CVE-2024-4341 · GHSA-qfw8-4q4g-qh9j

IDOR in ExtremePacs's Extreme XDS

Priority LOW 35

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00288 Published 2024-07-08 Fixed in 3928 CWE-639
TI-2024-07296 CVE-2024-7872 · GHSA-9c9c-fvg8-fgwr

Sensetive Data Exposure in ExtremePACS' Extreme XDS

Priority LOW 33

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data.

CVSS 3.1HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00249 Published 2025-03-06 Fixed in 3933 CWE-201
TI-2023-05977 CVE-2023-6522 · GHSA-4965-8838-r53x

Information Disclosure in ExtremePacs's Extreme XDS

Priority LOW 31

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00307 Published 2024-04-05 Fixed in 3914 CWE-648
Open these records in search →