Back to Database
Status published
Medium
CVE-2025-6083
ExtremeCloud Universal ZTNA Improper Authorization
Vulnerability Description
In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the owner_id filter. This issue may allow users to search data across the entire table instead of being restricted to their specific owner_id.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6083
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Bert Verschaeve
- Kees Brouwer
More from Extreme Networks
View All →CVE-2025-8679
ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force
High
7.6
CVE-2025-6235
ExtremeControl (NAC) 'onmouseover' XSS
Medium
5.3
CVE-2025-11192
Fabric Engine (VOSS) AutoSense Authentication Bypass
High
8.4
CVE-2020-36907
Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
High
8.7
Affected Vendor
Extreme Networks
View all reports →Affected Software
ExtremeCloud Universal ZTNA
Vulnerable Versions:
25.2.0
Timeline
Official Publish:
June 13th, 2025
Last Modified:
June 17th, 2025
Added to House:
July 22nd, 2026