Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhrc-c9xr-f633

Опубликовано: 16 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 6.8

Описание

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.

 

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.

 

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 68%
0.0056
Низкий

4.8 Medium

CVSS4

6.8 Medium

CVSS3

Дефекты

CWE-80

Связанные уязвимости

CVSS3: 6.8
nvd
больше 1 года назад

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 68%
0.0056
Низкий

4.8 Medium

CVSS4

6.8 Medium

CVSS3

Дефекты

CWE-80