[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-27202":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":21,"cwes":22,"cpes":24,"technologies":46,"references":68,"score":70,"epss_score":71,"epss_percentile":72,"is_kev":73,"cisa_kev_date_added":74,"cisa_kev_due_date":74,"cisa_ssvc":75,"attack_mappings":85,"exploits":92},46631,"CVE-2024-27202","EUVD-2024-24441","\nA DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2024-05-08T15:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":20,"privilegesRequired":20,"confidentialityImpact":17},"CHANGED","3.1",4.7,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","HIGH","NONE",true,[23],"CWE-79",[25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45],"cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",[47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],"F5 Big-Ip Application Acceleration Manager","F5 Big-Ip Advanced Web Application Firewall","F5 Big-Ip Local Traffic Manager","F5 Big-Ip Ddos Hybrid Defender","F5 Big-Ip Automation Toolchain","F5 Big-Ip Advanced Firewall Manager","F5 Big-Ip Ssl Orchestrator","F5 Big-Ip Container Ingress Services","F5 Big-Ip Access Policy Manager","F5 Big-Ip Fraud Protection Service","F5 Big-Ip Webaccelerator","F5 Big-Ip Websafe","F5 Big-Ip Application Visibility And Reporting","F5 Big-Ip Global Traffic Manager","F5 Big-Ip Policy Enforcement Manager","F5 Big-Ip Edge Gateway","F5 Big-Ip Domain Name System","F5 Big-Ip Application Security Manager","F5 Big-Ip Carrier-Grade Nat","F5 Big-Ip Link Controller","F5 Big-Ip Analytics",[69],"https:\u002F\u002Fmy.f5.com\u002Fmanage\u002Fs\u002Farticle\u002FK000138520",0.44,0.00272,0.1936,false,null,{"timestamp":76,"automatable":77,"tech_impact":78,"exploitation":79,"cisa_decision":80,"cisa_remediation_timeline":84},"2024-05-09T15:54:16.208221Z","no","partial","none",{"vector":81,"decision":82,"priority":83},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:38:51.567693\u002F","track_star","medium","60D",[86],{"name":87,"source":88,"tactics":89,"technique_id":91},"Exploit Public-Facing Application","attack_vector",[90],"initial-access","T1190",[]]