CVE-2023-6792

No fix known EPSS 1%CVSS 5.5

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Published 2023-12-13 · CVE record · OSV

Products: Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access, Palo Alto Networks Cloud NGFW