F5-K000140578: XSS
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000140578?
The severity of F5-K000140578 is high due to its impact on user security through stored cross-site scripting.
How do I fix F5-K000140578?
To fix F5-K000140578, you should update your F5 BIG-IP software to the recommended remedial version listed in the advisory.
Which versions of BIG-IP are affected by F5-K000140578?
The affected versions of BIG-IP for F5-K000140578 are 17.1.0 to 17.1.2, 16.1.0 to 16.1.5.2, and 15.1.0 to 15.1.10.6.
What type of vulnerability is F5-K000140578?
F5-K000140578 is a stored cross-site scripting (XSS) vulnerability.
What can attackers achieve with F5-K000140578?
Attackers can run malicious JavaScript in the context of a currently logged-in user exploiting F5-K000140578.