CVE-2024-47139: F5 BIG-IQ Vulnerability
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Other sources
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ user interface that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.
— F5
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47139?
CVE-2024-47139 is classified as a high severity vulnerability due to its potential impact on the security of the BIG-IQ Configuration utility.
How do I fix CVE-2024-47139?
To mitigate CVE-2024-47139, upgrade to the latest version of F5 BIG-IQ Centralized Management that addresses this vulnerability.
Who is affected by CVE-2024-47139?
CVE-2024-47139 affects users with the Administrator role on the BIG-IQ Configuration utility versions 8.2.0 and 8.3.08.2.0.1.
What type of vulnerability is CVE-2024-47139?
CVE-2024-47139 is identified as a stored cross-site scripting (XSS) vulnerability.
Can CVE-2024-47139 be exploited remotely?
Yes, CVE-2024-47139 can be exploited remotely by an attacker with administrator access to execute JavaScript in the context of another user's session.