Reflected XSS Vulnerability in Extreme Management Center from Extreme Networks

CVE-2020-13820

What is CVE-2020-13820?

Extreme Management Center version 8.4.1.24 is vulnerable to unauthenticated reflected XSS attacks, which can be triggered through a parameter in a GET request. This allows attackers to potentially execute malicious scripts in the context of users who access the compromised links, leading to unauthorized actions or data exposure. It is crucial for users of this product to assess their exposure and apply necessary security measures to mitigate the risks.

References