CVE-2025-0132CWE-306

Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services

Medium · published May 14, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.

The attacker must have network access to the Broker VM to exploit this issue.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:M/U:Amber
EPSS
0.00462 · 39.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-05-14T18:07Z
EPSS history
Timeline
  • 14 MAY 18:07Z
    Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services
    cvelistv5