← CVE Intelligence

CVE-2023-0007

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSaffected 10.0 before 10.0.7; affected 9.1 before 9.1.16; affected 9.0 before 9.0.17; affected 8.1 before 8.1.25; unaffected 10.1; unaffected 10.2; unaffected 11.0
Palo Alto Networks / Prisma Accessunaffected All
Palo Alto Networks / Cloud NGFWunaffected All

CWE

CWE-80

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.