← CVE Intelligence

CVE-2021-3043

Prisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console PUBLISHED

Description (CNA)

A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. No additional action is required for these instances. This issue impacts: Prisma Cloud Compute 20.12 versions earlier than Prisma Cloud Compute 20.12.552; Prisma Cloud Compute 21.04 versions earlier than Prisma Cloud Compute 21.04.439.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Prisma Cloud Computeaffected 21.04 before 21.04.439; affected 20.12 before 20.12.552

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.