CVE-2023-0007

No fix known EPSS <1%CVSS 6.5

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed.

Published 2023-05-10 · CVE record · OSV

Products: Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access, Palo Alto Networks Cloud NGFW