PT-2024-21736
CVE-2024-27202
·
تاريخ النشر
2024-05-08
·
تاريخ التحديث
2025-10-21
الوصف من
CVSS 3.1
4.7
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
BIG-IP (affected versions not specified)
Description
A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility, allowing an attacker to run JavaScript in the context of the currently logged-in user. Note that software versions which have reached End of Technical Support (EoTS) are not evaluated.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾