CVE-2024-47140

A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker.

• CWE-79

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2090Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2090Exploit, Third Party Advisory

Published

Jan 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47135Stack-based buffer overflow vulnerability exists in Kostac P…7.8
• CVE-2024-47136Out-of-bounds read vulnerability exists in Kostac PLC Progra…7.8
• CVE-2024-47137in OpenHarmony v4.1.0 and prior versions allow a local attac…7.8
• CVE-2024-47138The administrative interface listens by default on all inter…9.8
• CVE-2024-47139A stored cross-site scripting (XSS) vulnerability exists in …6.8
• CVE-2024-4714A vulnerability, which was classified as problematic, has be…6.1
• CVE-2024-47141In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-47142AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and…5.5
• CVE-2024-47143In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-47145Mattermost versions 9.5.x <= 9.5.8 fail to properly authoriz…4.3
• CVE-2024-47146Ruijie Reyee OS versions 2.206.x up to but not including 2.3…6.5
• CVE-2024-47148Some Honor products are affected by incorrect privilege assi…5.5