CVE-2023-0007CWE-80

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface

Medium · published May 10, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2023-05-10T16:30Z
EPSS history
Timeline
  • 10 MAY 16:30Z
    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface
    cvelistv5