Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-6790

PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 8.1 to < 8.1.25affected
  • 9.0 to < 9.0.17affected
  • 9.1 to < 9.1.16affected
  • 10.0 to < 10.0.12affected
  • 10.1 to < 10.1.9affected
  • 10.2 to < 10.2.4affected
  • 11.0 to < 11.0.1affected
  • 11.1 to < Allunaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

References