CVE-2024-52887: Self-XSS

Published Apr 27, 2025

Updated

Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.

Affected Software

5 affected components

All of the following

Any of the following

Checkpoint Mobile Access

Checkpoint Remote Access Vpn

Any of the following

Checkpoint Gaia Os=r81.10

Checkpoint Gaia Os=r81.20

Checkpoint Gaia Os=r82

Event History

Apr 27, 2025

CVE Published

via MITRE·07:46 AM

Data Sourced

via MITRE·07:46 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Jan 7, 57642

Event

via NVD·05:12 PM

Frequently Asked Questions

What is the severity of CVE-2024-52887?

CVE-2024-52887 is classified as a medium severity vulnerability due to its potential for exploitation by authenticated users.

How do I fix CVE-2024-52887?

To mitigate CVE-2024-52887, update to the latest version of Checkpoint Mobile Access or Checkpoint Remote Access VPN that addresses this vulnerability.

Who is affected by CVE-2024-52887?

Authenticated end-users of Checkpoint Mobile Access and Checkpoint Remote Access VPN are affected by CVE-2024-52887.

What impact does CVE-2024-52887 have on users?

CVE-2024-52887 may allow authenticated users to execute arbitrary scripts in their browsers, posing a risk of cross-site scripting attacks.

Is there a patch available for CVE-2024-52887?

Yes, Checkpoint has released a patch for CVE-2024-52887 that users should apply to secure their systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.