CVE-2020-2012CWE-611

PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak

High · published May 13, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management service allows remote unauthenticated attackers with network access to the Panorama management interface to read arbitrary files on the system. This issue affects: All versions of PAN-OS for Panorama 7.1 and 8.0; PAN-OS for Panorama 8.1 versions earlier than 8.1.13; PAN-OS for Panorama 9.0 versions earlier than 9.0.7.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01983 · 80.3th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2020-05-13T19:07Z
EPSS history
Timeline
  • 13 MAY 19:07Z
    PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak
    cvelistv5