Back to Database
Status published
High
CVE-2024-31199
A “CWE-79: Improper Neutralization of Input During Web Page Generation...
Vulnerability Description
A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users to permanently inject arbitrary Javascript code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-31199
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Diego Zaffaroni of Nozomi Networks found this bug during a security research activity.
More from Plug&Track
View All →CVE-2024-3083
A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by...
High
8.3
CVE-2024-3082
A “CWE-256: Plaintext Storage of a Password” affecting the administrative...
Medium
4.2
CVE-2024-31203
A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library...
Low
3.3
CVE-2024-31202
A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the...
High
7.8
CVE-2024-31201
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation...
Medium
6.5
Affected Vendor
Plug&Track
View all reports →Affected Software
Sensor Net Connect V2
Vulnerable Versions:
2.24
Timeline
Official Publish:
July 31st, 2024
Last Modified:
September 30th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H