CVE-2025-4616CWE-354

CVE-2025-4616

published November 14, 2025

CVSS
1.1
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.

The record
Technical detail
CVSS
1.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2025-11-14T23:15Z
References (1)
https://security.paloaltonetworks.com/CVE-2025-4616 · [email protected]
EPSS history
Timeline
  • 14 NOV 17:33Z
    Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser
    cvelistv5