Advisories · Technology
Palo Alto Networks Cortex XDR Agent.
Every CVE that names Palo Alto Networks Cortex XDR Agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.0 Medium
Cortex XDR Agent: Local Administrator can disable the agent on Windows
- Palo Alto Networks Cortex XDR Agent
- CWE-15
- CVSS 4.0 Medium
Cortex XDR Agent: Local Administrator can disable the agent on macOS
- Palo Alto Networks Cortex XDR Agent
- CWE-754
- CVSS 6.8 Medium
Cortex XDR Agent: Local Windows User Can Crash the Agent
- Palo Alto Networks Cortex XDR Agent
- Memory corruption
- CVSS 6.8 Medium
Cortex XDR Agent: Local Windows User Can Disable the Agent
- Palo Alto Networks Cortex XDR Agent
- CWE-754
- CVSS 5.7 Medium
Cortex XDR Agent: Local Windows User Can Disable the Agent
- Palo Alto Networks Cortex XDR Agent
- CWE-754
- CVSS 5.6 Medium
Cortex XDR Agent: Local Windows Administrator Can Disable the Agent
- Palo Alto Networks Cortex XDR Agent
- CWE-440
- CVSS 6.8 Medium
Cortex XDR Agent: Improper File Signature Verification Checks
- Palo Alto Networks Cortex XDR Agent
- Weak cryptography or TLS
- CVSS 6.8 Medium
Cortex XDR Agent: Local Windows User Can Disable the Agent
- Palo Alto Networks Cortex XDR Agent
- Privilege escalation
- CVSS 5.2 Medium
Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks Cortex XDR Agent
- Privilege escalation
- CVSS 2.0 Low
Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent
- Palo Alto Networks Cortex XDR Agent
- CWE-346
- CVSS 5.5 Medium
Cortex XDR Agent: Local Windows User Can Disable the Agent
- Palo Alto Networks Cortex XDR Agent
- CWE-755
- CVSS 5.5 Medium
Cortex XDR Agent: Product Disruption by Local Windows User
- Palo Alto Networks Cortex XDR agent
- CWE-693
- CVSS 6.0 Medium
Cortex XDR Agent: Cleartext Exposure of Agent Admin Password
- Palo Alto Networks Cortex XDR agent
- Weak cryptography or TLS
- CVSS 5.5 Medium
Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File
- Palo Alto Networks Cortex XDR Agent
- Path traversal
- CVSS 6.7 Medium
Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks Cortex XDR Agent
- CWE-282
- CVSS 6.7 Medium
Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks Cortex XDR Agent
- CWE-427
- CVSS 7.8 High
Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks Cortex XDR Agent
- CWE-427
- CVSS 6.7 Medium
Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session
- Palo Alto Networks Cortex XDR Agent
- CWE-426
- CVSS 5.0 Medium
Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File
- Palo Alto Networks Cortex XDR Agent
- Information disclosure
- CVSS 6.1 Medium
Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability
- Palo Alto Networks Cortex XDR Agent
- Path traversal
- CVSS 7.8 High
Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation
- Palo Alto Networks Cortex XDR Agent
- CWE-427
- CVSS 7.8 High
Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation
- Palo Alto Networks Cortex XDR Agent
- CWE-427
- CVSS 7.8 High
Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation
- Palo Alto Networks Cortex XDR Agent
- CWE-427
- CVSS 5.5 Medium
Cortex XDR Agent: Exceptional condition denial-of-service (DoS)
- Palo Alto Networks Cortex XDR Agent
- CWE-755