Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q845-rv2h-x553

Опубликовано: 13 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4.4
CVSS3: 4.8

Описание

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface.

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface.

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

EPSS

Процентиль: 8%
0.00179
Низкий

4.4 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
3 месяца назад

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

CVSS3: 5.2
fstec
3 месяца назад

Уязвимость веб-интерфейса операционной системы PAN-OS межсетевых экранов серии PA-Series и VM-Series, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 8%
0.00179
Низкий

4.4 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79