Products
BIG-IP Configuration utility
Source
f5sirt@f5.com
Tags
CVE-2024-27202 details
Published : May 8, 2024, 3:15 p.m.
Last Modified : May 8, 2024, 5:05 p.m.
Last Modified : May 8, 2024, 5:05 p.m.
Description
A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score
| 1 | 2 | 3 | 4.7 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
CVSS Data
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Base Score
4.7
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
References
| URL | Source |
|---|---|
| https://my.f5.com/manage/s/article/K000138520 | f5sirt@f5.com |
This website uses the NVD API, but is not approved or certified by it.