← CVE Intelligence

CVE-2023-6789

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface. Then, when viewed by a properly authenticated administrator, the JavaScript payload executes and disguises all associated actions as performed by that unsuspecting authenticated administrator.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSaffected 8.1 before 8.1.26; affected 9.0 before 9.0.17-h4; affected 9.1 before 9.1.17; affected 10.0 through All; affected 10.1 before 10.1.11; affected 10.2 before 10.2.5; affected 11.0 before 11.0.2; unaffected 11.1 before All
Palo Alto Networks / Prisma Accessunaffected All
Palo Alto Networks / Cloud NGFWunaffected All

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.