Lucene search
HistoryAug 31, 2013 - 5:55 p.m.
CVE-2013-5664
cve-2013-5664
cross-site scripting
xss
vulnerability
palo alto networks
pan-os
remote attack
crafted data
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.2%
Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.
Affected configurations
Node
paloaltonetworkspan-osMatch4.0.0
ORpaloaltonetworkspan-osMatch4.0.1
ORpaloaltonetworkspan-osMatch4.0.2
ORpaloaltonetworkspan-osMatch4.0.3
ORpaloaltonetworkspan-osMatch4.0.4
ORpaloaltonetworkspan-osMatch4.0.5
ORpaloaltonetworkspan-osMatch4.0.6
ORpaloaltonetworkspan-osMatch4.0.7
ORpaloaltonetworkspan-osMatch4.0.8
ORpaloaltonetworkspan-osMatch4.1.0
ORpaloaltonetworkspan-osMatch4.1.1
ORpaloaltonetworkspan-osMatch4.1.2
ORpaloaltonetworkspan-osMatch4.1.3
ORpaloaltonetworkspan-osMatch4.1.4
ORpaloaltonetworkspan-osMatch4.1.5
ORpaloaltonetworkspan-osMatch4.1.6
ORpaloaltonetworkspan-osMatch4.1.7
ORpaloaltonetworkspan-osMatch4.1.8
ORpaloaltonetworkspan-osMatch4.1.8-h3
ORpaloaltonetworkspan-osMatch4.1.9
ORpaloaltonetworkspan-osMatch4.1.10
ORpaloaltonetworkspan-osMatch4.1.11
ORpaloaltonetworkspan-osMatch4.1.12
ORpaloaltonetworkspan-osMatch5.0.0
ORpaloaltonetworkspan-osMatch5.0.0-h1
ORpaloaltonetworkspan-osMatch5.0.2
ORpaloaltonetworkspan-osMatch5.0.3
ORpaloaltonetworkspan-osMatch5.0.4
ORpaloaltonetworkspan-osMatch5.0.5
Related
cvelist
cvelist
CVE-2013-5664
2013-08-31 17:00:00
nvd
nvd
CVE-2013-5664
2013-08-31 17:55:03
nessus
nessus
Palo Alto Networks PAN-OS < 4.1.13 / 5.0.x < 5.0.6 XSS
2014-03-05 00:00:00
prion
prion
Cross site scripting
2013-08-31 17:55:00
paloalto
paloalto
Cross-site Scripting Vulnerability
2013-07-22 07:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.2%
Related for CVE-2013-5664