CVE-2016-9149

The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and…

published November 19, 2016

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 mishandles single quote characters, which allows remote authenticated users to conduct XPath injection attacks via a crafted string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02040 · 80.8th percentile
Published
2016-11-19T06:29Z
EPSS history
Timeline
  • 19 NOV 06:29Z
    The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and…
    cvelistv5