CVE-2025-24320

Summary

CVE-2025-24320 is a stored cross-site scripting (XSS) vulnerability discovered in the BIG-IP Configuration utility. This issue allows an attacker to inject malicious JavaScript code into an undisclosed page, which will be executed in the context of the currently logged-in user. This vulnerability stems from an incomplete fix for the previously identified XSS flaw, CVE-2024-31156. It is important to note that only software versions receiving technical support are evaluated for this issue. (Note: The text has been paraphrased to provide a concise and objective summary without directly copying from the source text.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.