14 matches found
Extreme Management Center 8.4.1.24 - Cross-Site Scripting
Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...
CVE-2020-13820
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
CVE-2020-16847
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887...
CVE-2020-16847
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887...
CVE-2020-16847
CVE-2020-16847 affects Extreme Analytics in Extreme Management Center prior to 8.5.0.169 and describes an unauthenticated reflected XSS via a parameter in a GET request (CFD-4887). The connected documents provide the vulnerability claim but do not supply exploitation details, affected versions be...
CVE-2020-16847
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887...
CVE-2020-16847: Improper Neutralization of Input During Web Page Generation
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887...
PT-2020-14891
Name of the Vulnerable Software and Affected Versions Extreme Management Center versions prior to 8.5.0.169 Description The issue allows unauthenticated reflected XSS via a parameter in a GET request. Recommendations For versions prior to 8.5.0.169, update to version 8.5.0.169 or later to resolve...
CVE-2020-13820
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
Cross site request forgery (csrf)
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
CVE-2020-13820
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
CVE-2020-13820
CVE-2020-13820 affects Extreme Management Center 8.4.1.24 and is described in multiple sources as an unauthenticated reflected XSS vulnerability caused by a GET parameter. The nuclei template specifies that an attacker can inject arbitrary script in the victim’s browser, potentially stealing cook...
PT-2020-13703
Name of the Vulnerable Software and Affected Versions Extreme Management Center version 8.4.1.24 Description The issue allows unauthenticated reflected XSS via a parameter in a GET request. Recommendations For Extreme Management Center version 8.4.1.24, update to a version that fixes this issue. ...
CVE-2020-13820: Improper Neutralization of Input During Web Page Generation
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...