Extremeidea vulnerabilities
We track 3 vulnerabilities in Extremeidea products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.
Latest Extremeidea vulnerabilities
- 7.1 High severity
bidorbuy Store Integrator: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Reflected XSS.This issue affects bidorbuy Store Integrator: from n/a through <= 2.12.0.
- 9.1 Critical severity
bidorbuy Store Integrator: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code Inclusion.This issue affects bidorbuy Store Integrator: from n/a through <= 2.12.0.
- 9.8 Critical severity
vBSSO-lite: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through <= 1.4.3.