Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 15

Export CSV
CVE-2025-4234

Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials

A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.

CVSS 4.0 · 2.4 Low EPSS < 1% KEV · Not listed
Vendors
Microsoft Palo Alto Paloaltonetworks
Products
365 Networks Cortex Xdr and 2 more
CVE-2026-0270

Cortex XSOAR: Path Traversal Vulnerability

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Palo Alto Networks Paloaltonetworks
Products
Linux Kernel Cortex Xsoar Cortex Xsoar
CVE-2026-0274

Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

CVSS 4.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Palo Alto Networks Paloaltonetworks
Products
Cortex Xsiam Commvaultsecurityiq Marketplace Cortex Xsoar Commvaultsecurityiq Marketplace Cortex Xsiam Commvaultsecurityiq Marketplace and 1 more
CVE-2024-9470

Cortex XSOAR: Information Disclosure Vulnerability

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar
CVE-2026-0234

Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Palo Alto Networks Paloaltonetworks
Products
Cortex Xsiam Microsoft Teams Marketplace Cortex Xsoar Microsoft Teams Marketplace Cortex Xsiam and 1 more
CVE-2022-0031

Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Paloaltonetworks
Products
Linux Kernel Cortex Xsoar
CVE-2023-0003

Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Fedoraproject Paloaltonetworks
Products
Fedora Cortex Xsoar
CVE-2023-3282

Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Paloaltonetworks
Products
Linux Kernel Cortex Xsoar
CVE-2022-0027

Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar
CVE-2022-0020

Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface

A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.

CVSS 3.1 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar
CVE-2021-3051

Cortex XSOAR: Authentication Bypass in SAML Authentication

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar
CVE-2021-3049

Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability

An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar
CVE-2021-3044

Cortex XSOAR: Unauthorized Usage of the REST API

An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform unauthorized actions through the REST API. This issue impacts: Cortex XSOAR 6.1.0 builds later than 1016923 and earlier than 1271064; Cortex XSOAR 6.2.0 builds earlier than 1271065. This issue does not impact Cortex XSOAR 5.5.0, Cortex XSOAR 6.0.0, Cortex XSOAR 6.0.1, or Cortex XSOAR 6.0.2 versions. All Cortex XSOAR instances hosted by Palo Alto Networks are upgraded to resolve this vulnerability. No additional action is required for these instances.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar
CVE-2021-3034

Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar
CVE-2024-5914

Cortex XSOAR: Command Injection in CommonScripts Pack

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container.

CVSS 4.0 · 7 High EPSS 1.2% KEV · Not listed
Vendors
Paloaltonetworks
Products
Cortex Xsoar Commonscripts