Vulnerabilities (CVE)

Filtered by vendor Extremenetworks Subscribe
Filtered by product Extremecontrol
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-6235 1 Extremenetworks 1 Extremecontrol 2026-01-14 N/A 6.1 MEDIUM
In ExtremeControl before 25.5.12, a cross-site scripting (XSS) vulnerability was discovered in a login interface of the affected application. The issue stems from improper handling of user-supplied input within HTML attributes, allowing an attacker to inject script code that may execute in a user's browser under specific interaction conditions. Successful exploitation could lead to exposure of user data or unauthorized actions within the browser context.