← All advisories

Medium severity6.1NVD Advisory· Published Aug 3, 2020· Updated Jun 17, 2026

CVE-2020-13820

CVE-2020-13820

Description

Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Extremenetworks/Extreme Management Center2 versions
cpe:2.3:a:extremenetworks:extreme_management_center:8.4.1.24:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:extremenetworks:extreme_management_center:8.4.1.24:*:*:*:*:*:*:*
- (no CPE)range: <8.4.1.24

Patches

Vulnerability mechanics

References

4

documentation.extremenetworks.com/release_notes/netsight/XMC_8.5.0_Release_Notes.pdfnvdRelease NotesVendor Advisory
gtacknowledge.extremenetworks.comnvdThird Party Advisory
gtacknowledge.extremenetworks.com/articles/Solution/000051136nvdThird Party Advisory
medium.com/%400x00crash/xss-reflected-in-extreme-management-center-8-4-1-24-cve-2020-13820-c6febe951219nvd

News mentions

0

No linked articles in our index yet.