Login Request a demo
EX
Vendor
Extremenetworks
13 products with CVEs on record
31
CVEs
0
On KEV
0
New 30D
Products
EX
Extremexos
Extremenetworks
8.6
8 CVEs0 on KEV0 new
EX
Exos
Extremenetworks
9.8
5 CVEs0 on KEV0 new
EM
Extreme Management Center
Extremenetworks
6.1
3 CVEs0 on KEV0 new
IE
IQ Engine
extremenetworks
9.8
3 CVEs0 on KEV0 new
XI
Xiq-se
Extremenetworks
9.8
3 CVEs0 on KEV0 new
EW
Extremewireless Wing
Extremenetworks
7.5
2 CVEs0 on KEV0 new
AN
Aerohive Netconfig
Extremenetworks
9.8
1 CVEs0 on KEV0 new
EI
Extremecloud IQ Site Engine
Extremenetworks
4.9
1 CVEs0 on KEV0 new
EU
Extremecloud Universal Ztna
Extremenetworks
4.3
1 CVEs0 on KEV0 new
EX
Extremecontrol
Extremenetworks
6.1
1 CVEs0 on KEV0 new
EE
Extremeguest Essentials
Extremenetworks
9.8
1 CVEs0 on KEV0 new
EX
Extremeware Xos
Extremenetworks
–
1 CVEs0 on KEV0 new
FE
Fabric Engine (voss)
Extremenetworks
8.6
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-46273
IE
IQ Engine
extremenetworks
8.8
1%
Sep 14Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send
CVE-2026-0689
EI
Extremecloud IQ Site Engine
Extremenetworks
4.9
0%
Mar 2XIQ‑SE NAC Admin Credential Exposure via HTTP Response
CVE-2025-11192
FE
Fabric Engine (voss)
Extremenetworks
8.6
0%
Oct 7Fabric Engine (VOSS) AutoSense Authentication Bypass
CVE-2025-8679
EE
Extremeguest Essentials
Extremenetworks
9.8
0%
Oct 1ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force
CVE-2025-6235
EX
Extremecontrol
Extremenetworks
6.1
0%
Jul 21ExtremeControl (NAC) 'onmouseover' XSS
CVE-2025-6083
EU
Extremecloud Universal Ztna
Extremenetworks
4.3
0%
Jun 13ExtremeCloud Universal ZTNA Improper Authorization
CVE-2024-38291
XI
Xiq-se
Extremenetworks
8.8
0%
Feb 27In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation
CVE-2024-38292
XI
Xiq-se
Extremenetworks
9.8
1%
Feb 27In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation
CVE-2024-38290
XI
Xiq-se
Extremenetworks
5.3
0%
Feb 27In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met
CVE-2020-18305
EX
Extremexos
Extremenetworks
8.0
1%
May 14Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive…
CVE-2024-27453
EX
Extremexos
Extremenetworks
8.6
1%
May 3In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI)
CVE-2023-43121
EX
Exos
Extremenetworks
7.5
1%
Oct 16A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to…
CVE-2023-43119
EX
Exos
Extremenetworks
9.8
1%
Oct 16An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted…
CVE-2023-43118
EX
Exos
Extremenetworks
8.8
0%
Oct 16Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to…
CVE-2023-43120
EX
Exos
Extremenetworks
8.8
1%
Oct 16An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request
CVE-2023-35803
IE
IQ Engine
Extremenetworks
9.8
2%
Oct 4IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow
CVE-2023-35802
IE
IQ Engine
Extremenetworks
9.8
1%
Jul 15IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to…
CVE-2020-16152
AN
Aerohive Netconfig
Extremenetworks
9.8
36%
Nov 14The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user…
CVE-2020-13819
EM
Extreme Management Center
Extremenetworks
6.1
1%
Aug 5Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request
CVE-2020-16847
EM
Extreme Management Center
Extremenetworks
6.1
1%
Aug 4Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887
CVE-2020-13820
EM
Extreme Management Center
Extremenetworks
6.1
4%
Aug 3Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request
CVE-2018-5797
EW
Extremewireless Wing
Extremenetworks
7.5
0%
Feb 5An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3
CVE-2018-5787
EW
Extremewireless Wing
Extremenetworks
7.5
1%
Feb 5An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3
CVE-2017-14332
EX
Extremexos
Extremenetworks
8.1
1%
Oct 23Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values
CVE-2017-14331
EX
Extremexos
Extremenetworks
6.7
0%
Oct 23Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell
CVE-2017-14330
EX
Extremexos
Extremenetworks
6.7
0%
Oct 23Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process
CVE-2017-14329
EX
Extremexos
Extremenetworks
6.7
0%
Oct 23Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell
CVE-2017-14328
EX
Extremexos
Extremenetworks
7.5
1%
Oct 23Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot
CVE-2017-14327
EX
Extremexos
Extremenetworks
4.4
0%
Oct 23Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files
CVE-2013-7309
EX
Exos
Extremenetworks
–
1%
Jan 23The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing…
CVE-2005-1670
EX
Extremeware Xos
Extremenetworks
–
1%
May 19Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated…