Aller au contenu
en Se connecter
4.8 Moyenne

CVE-2024-47139 A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that…

Description

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Produits et versions touchés

Produit Versions touchées Corrigé en
BIG-IQ 8.3 premières → < 8.3.0 8.3.0
BIG-IQ 8.0 8.0 → < 8.2.0.1 8.2.0.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de BIG-IQ

Les 20 CVE de BIG-IQ →
CVE-2026-66842 BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts… 8.8 Élevée CVE-2026-42406 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least… 8.7 Élevée CVE-2026-41959 Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics… 6.5 Moyenne CVE-2026-32643 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least… 8.7 Élevée
Suivre cette CVE