Cross site scripting

2023-12-1319:15:00

PRIOn knowledge base

www.prio-n.com

dom-based

cross-site scripting

remote attacker

javascript payload

administrator's browser

crafted link

pan-os

web interface

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.

CPENameOperatorVersion
pan-osge9.0.0
pan-oslt9.0.17
pan-osge10.0.0
pan-oslt10.0.12
pan-osge8.1.0
pan-oslt8.1.25
pan-osge9.1.0
pan-oslt9.1.16
pan-oseq11.0.0
pan-osge10.2.0