CVE-2024-31156

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: May 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-311575.3Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable i CVE-2024-311587.5Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to potentially enable es CVE-2024-311594.8The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrativ CVE-2024-31169.8pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows a CVE-2024-311604.8The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrativ CVE-2024-311617.2The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exp CVE-2024-311627.2The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with adminis CVE-2024-311637.2ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this CVE-2024-311647.5Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vu CVE-2024-311657.5Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vu CVE-2024-311667.5Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with p CVE-2024-311677.5Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vu