CVE-2020-13820: XSS
Published Aug 3, 2020
·Updated
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request.
Affected Software
1 affected component
Extremenetworks Extreme Management Center=8.4.1.24
Event History
Aug 3, 2020
CVE Published
via MITRE·04:22 PM
Data Sourced
via MITRE·04:22 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-13820?
The severity of CVE-2020-13820 is medium (6.1).
2
How does CVE-2020-13820 affect Extreme Management Center?
CVE-2020-13820 allows unauthenticated reflected XSS in Extreme Management Center version 8.4.1.24.
3
Is authentication required to exploit CVE-2020-13820?
No, CVE-2020-13820 can be exploited without authentication.
4
How can I fix CVE-2020-13820 in Extreme Management Center?
To fix CVE-2020-13820, upgrade to a version of Extreme Management Center that is not affected by this vulnerability (e.g., version 8.5.0).
5
Where can I find more information about CVE-2020-13820?
For more information about CVE-2020-13820, you can refer to the release notes and knowledge base articles provided by Extreme Networks.