CVE-2024-47140

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jan 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471415.5In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc->pinmux data When two cli CVE-2024-471425.5AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently pr CVE-2024-471435.5In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radix_lock radix_lock() shouldn'CVE-2024-471454.3Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which CVE-2024-471466.5Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically a CVE-2024-471485.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-471495.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-47156.1A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects a CVE-2024-471505.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471517.8Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution CVE-2024-471535.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471545.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.