Vulnerabilities

TI-2026-83440 CVE-2026-63339

IXP Manager lets authenticated users escalate to administrator

MEDIUM 40

IXP Manager is a full-stack web application for managing Internet Exchange Points.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00267 Published 2026-10-30 Fixed in 7.3.0 CWE-20

TI-2026-83438 CVE-2026-63338

LOW 38

IXP Manager is a full-stack web application for managing Internet Exchange Points.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.0026 Published 2026-10-30 Fixed in 7.3.0 CWE-639

TI-2023-18482 CVE-2023-36666 · GHSA-8fjm-6f37-g297

LOW 27

INEX IXP-Manager before 6.3.1 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00399 Published 2023-06-25 No fix listed CWE-79

TI-2020-15216 CVE-2020-24857 · GHSA-c5vq-cgx6-878h

LOW 27

Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking glass component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00406 Published 2023-03-23 No fix listed CWE-79

TI-2022-04163 CVE-2022-4559 · GHSA-mc44-cchg-wh3w

LOW 28

A vulnerability was found in INEX IPX-Manager up to 6.2.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00592 Published 2022-12-16 No fix listed CWE-707