CVE-2020-16847: XSS
Published Aug 4, 2020
·Updated
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887.
Affected Software
1 affected component
Extremenetworks Extreme Management Center<8.5.0.169
Event History
Aug 4, 2020
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
Description
Frequently Asked Questions
1
What is CVE-2020-16847?
CVE-2020-16847 is a vulnerability in Extreme Analytics in Extreme Management Center before 8.5.0.169 that allows unauthenticated reflected XSS.
2
How severe is CVE-2020-16847?
CVE-2020-16847 has a severity rating of 6.1 (medium).
3
How can I exploit CVE-2020-16847?
To exploit CVE-2020-16847, an attacker can send a malicious GET request with a crafted parameter.
4
Is there a fix for CVE-2020-16847?
Yes, the fix for CVE-2020-16847 is available in Extreme Management Center version 8.5.0.169 and later.
5
Where can I find more information about CVE-2020-16847?
You can find more information about CVE-2020-16847 in the release notes and knowledge base article provided by Extreme Networks.