CVE-2019-1565

2019-01-3020:00:00

palo_alto

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.

CNA Affected

[
  {
    "product": "Palo Alto Networks PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "affected",
        "version": "PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier."
      }
    ]
  }
]