← CVE Intelligence

CVE-2023-6790

PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface PUBLISHED

Description (CNA)

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSaffected 8.1 before 8.1.25; affected 9.0 before 9.0.17; affected 9.1 before 9.1.16; affected 10.0 before 10.0.12; affected 10.1 before 10.1.9; affected 10.2 before 10.2.4; affected 11.0 before 11.0.1; unaffected 11.1 before All
Palo Alto Networks / Prisma Accessunaffected All
Palo Alto Networks / Cloud NGFWunaffected All

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.