Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16847
Reference (s):
- https://documentation.extremenetworks.com/release_notes/netsight/XMC_8.5.0_Release_Notes.pdf
- https://gtacknowledge.extremenetworks.com/articles/Solution/000051136