CVE-2024-0007

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface on Panorama appliances. This enables the impersonation of another authenticated administrator.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os Panorama M-200 Panorama M-500 and 1 more

CVE-2024-0009

PAN-OS: Improper IP Address Verification in GlobalProtect Gateway

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2024-0011

PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of an authenticated Captive Portal user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2023-6793

PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2024-9473

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Globalprotect Globalprotect App

CVE-2024-5909

Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Cortex Xdr Agent

CVE-2024-5908

GlobalProtect App: Encrypted Credential Exposure via Log Files

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs.

CVSS 4.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Globalprotect

CVE-2024-5906

Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Prisma Cloud

CVE-2024-5905

Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Cortex Xdr Agent

CVE-2023-6795

PAN-OS: OS Command Injection Vulnerability in the Web Interface

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2023-6794

PAN-OS: File Upload Vulnerability in the Web Interface

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2023-6792

PAN-OS: OS Command Injection Vulnerability in the XML API

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2023-6790

PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2023-6789

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface. Then, when viewed by a properly authenticated administrator, the JavaScript payload executes and disguises all associated actions as performed by that unsuspecting authenticated administrator.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Pan-os

CVE-2023-3282

Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Paloaltonetworks

Products

Linux Kernel Cortex Xsoar

CVE-2023-3280

Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft Paloaltonetworks

Products

Windows Cortex Xdr Agent

CVE-2023-0001

Cortex XDR Agent: Cleartext Exposure of Agent Admin Password

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft Paloaltonetworks

Products

Windows Cortex Xdr Agent

CVE-2022-0027

Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Paloaltonetworks

Products

Cortex Xsoar

CVE-2022-0026

Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft Paloaltonetworks

Products

Windows Cortex Xdr Agent

CVE-2022-0025

Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts: All versions of the Cortex XDR agent when upgrading to Cortex XDR agent 7.7.0 on Windows; Cortex XDR agent 7.7.0 without content update 500 or a later version on Windows. This issue does not impact other platforms or other versions of the Cortex XDR agent.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft Paloaltonetworks

Products

Windows Cortex Xdr Agent