Advisories · Technology
Palo Alto Networks Cortex XSOAR.
Every CVE that names Palo Alto Networks Cortex XSOAR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
Cortex XSOAR: Path Traversal Vulnerability
- Palo Alto Networks Cortex XSOAR
- Path traversal
- CVSS 5.3 Medium
Cortex XSOAR: Information Disclosure Vulnerability
- Palo Alto Networks Cortex XSOAR
- Information disclosure
- CVSS 6.4 Medium
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
- Palo Alto Networks Cortex XSOAR
- Broken access control
- CVSS 6.5 Medium
Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
- Palo Alto Networks Cortex XSOAR
- Path traversal
- CVSS 6.7 Medium
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
- Palo Alto Networks Cortex XSOAR
- CWE-345
- CVSS 4.3 Medium
Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports
- Palo Alto Networks Cortex XSOAR
- Broken access control
- CVSS 6.8 Medium
Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface
- Palo Alto Networks Cortex XSOAR
- Cross-site scripting (XSS)
- CVSS 8.1 High
Cortex XSOAR: Authentication Bypass in SAML Authentication
- Palo Alto Networks Cortex XSOAR
- Weak cryptography or TLS
- CVSS 2.6 Low
Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability
- Palo Alto Networks Cortex XSOAR
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Cortex XSOAR: Unauthorized Usage of the REST API
- Palo Alto Networks Cortex XSOAR
- Broken access control
- CVSS 5.1 Medium
Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs
- Palo Alto Networks Cortex XSOAR
- Information disclosure