Login Request a demo
EX
Product
Exos
by Extremenetworks · last CVE May 13, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 4Medium 0Low 0
Severity
All severities6Critical1High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Exos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-43119
9.8
1%
Oct 16
An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted…
Affected: before 22.7; 31.7.0 before 31.7.2; 32.0 before 32.5.1.5
CVE-2023-43120
8.8
1%
Oct 16
An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request
Affected: before 22.7; 31.0 before 31.7.1; 32.0 before 32.5.1.5
CVE-2023-43118
8.8
0%
Oct 16
Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to…
Affected: 31.7.0 before 31.7.2; 32.0 before 32.5.1.5
CVE-2020-18305
8.0
1%
May 13
Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive…
Affected: 22.7 before 30.2
CVE-2023-43121
7.5
1%
Oct 16
A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to…
Affected: before 22.7; 31.7.0 before 31.7.2; 32.0 before 32.5.1.5
CVE-2013-7309
–
1%
Jan 23
The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing…
Affected: All versions, or not specified
Showing 6