TROYANOSYVIRUS
Back to CVEs

CVE-2024-38290

MEDIUM
5.3

Description

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met.

CVE Details

CVSS v3.1 Score5.3
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published2/27/2025
Last Modified7/11/2025
Sourcenvd
Honeypot Sightings0

Affected Products

extremenetworks:xiq-se

Weaknesses (CWE)

CWE-200

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.