CVE-2024-38290: Extremenetworks Xiq-SE

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met.

Affected products

• Extremenetworks Xiq-SE: before 24.2.11 (fixed in 24.2.11)

Published 2025-02-27. Last modified 2026-06-17.