← CVE Intelligence

CVE-2024-5906

Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Prisma Cloud Computeaffected 32 before 32.05 (O’Neal - Update 5)

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.