CVE-2025-4228

🗓️ 12 Jun 2025 23:41:37Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 43 Views

Cortex XDR Broker VM has a privilege escalation vulnerability for authenticated administrative users.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of Palo Alto Networks Cortex, a cloud-based security platform, allows attackers to elevate their privileges to the root level.	21 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-4228	11 Jun 202514:00	–	circl
CNNVD	Palo Alto Networks Cortex XDR Broker VM 安全漏洞	12 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-4228 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability	12 Jun 202523:41	–	cvelist
EUVD	EUVD-2025-18225	3 Oct 202520:07	–	euvd
NVD	CVE-2025-4228	13 Jun 202500:15	–	nvd
Positive Technologies	PT-2025-25360 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm	11 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-4228	15 Jun 202500:21	–	redhatcve
Vulnrichment	CVE-2025-4228 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability	12 Jun 202523:41	–	vulnrichment

Vulners

Node

paloaltonetworks cortex_xdr_broker_vmRange27.0.0–27.0.26

[
  {
    "defaultStatus": "unaffected",
    "product": "Cortex XDR Broker VM",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "27.0.26",
            "status": "unaffected"
          }
        ],
        "lessThan": "27.0.26",
        "status": "affected",
        "version": "27.0.0",
        "versionType": "custom"
      }
    ]
  }
]