PT-2020-14891

CVE-2020-16847

Published

2020-08-04

Updated

2020-08-11

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Extreme Management Center versions prior to 8.5.0.169

Description The issue allows unauthenticated reflected XSS via a parameter in a GET request.

Recommendations For versions prior to 8.5.0.169, update to version 8.5.0.169 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾