CVE-2017-15943

The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before…

published December 11, 2017

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01705 · 77.1th percentile
Published
2017-12-11T17:00Z
EPSS history
Timeline
  • 11 DEC 17:00Z
    The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before…
    cvelistv5