Apparently security isn't something of Extreme´s top priorities, why else would you let your customers in the dark about your affected products for so long?
Partially no update for 2 months now:
SA-2022-001 – "PwnKit" (CVE-2021-4034) - https://extremeportal.force.com/ExtrArticleDetail?an=000102362
SA-2022-004 – Spring Framework (CVE-2022-22950) - https://extremeportal.force.com/ExtrArticleDetail?an=000103894
SA-2022-005 – Spring Cloud Function (CVE-2022-22963) - https://extremeportal.force.com/ExtrArticleDetail?an=000103895
SA-2022-006 – OpenSSL (CVE-2022-0778) - https://extremeportal.force.com/ExtrArticleDetail?an=000104007
SA-2022-010 – OpenSSL (CVE-2022-1292) - https://extremeportal.force.com/ExtrArticleDetail?an=000104777
I'm interested in IQVA and IQEngine (HiveOS).
