Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2022-0020

Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cortex XSOAR

  • 6.5.0 allunaffected
  • 6.1.0 allaffected
  • 6.2.0 to < 1958888affected

References