CVE-2023-6522
HIGHCVSS 7.2/10EPSS 0.31%
Last modified
CVE-2023-6522 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2023-6522?
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users.
This issue affects Extreme XDS: before 3914.
How severe is CVE-2023-6522?
CVE-2023-6522 has a CVSS score of 7.2/10 (HIGH severity). The EPSS model estimates a 0.31% probability of exploitation in the next 30 days.
How do I fix CVE-2023-6522?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-6515Authorization Bypass Through User-Controlled Key vulnerabili…8.8
- CVE-2023-6516To keep its cache database efficient, `named` running as a r…7.5
- CVE-2023-6517Exposure of Sensitive Information Due to Incompatible Polici…7.5
- CVE-2023-6518Plaintext Storage of a Password vulnerability in Mia Technol…7.5
- CVE-2023-6519Exposure of Data Element to Wrong Session vulnerability in M…7.5
- CVE-2023-6520The WP 2FA – Two-factor authentication for WordPress plugin …4.3
- CVE-2023-6523Authorization Bypass Through User-Controlled Key vulnerabili…8.8
- CVE-2023-6524The MapPress Maps for WordPress plugin for WordPress is vuln…5.4
- CVE-2023-6525The ElementsKit Elementor addons plugin for WordPress is vul…4.8
- CVE-2023-6526The Meta Box – WordPress Custom Fields Framework plugin for …5.4
- CVE-2023-6527The Email Subscription Popup plugin for WordPress is vulnera…6.1
- CVE-2023-6528The Slider Revolution WordPress plugin before 6.6.19 does no…8.8
Are you affected by CVE-2023-6522?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST