CVE-2019-1566

2019-01-2300:00:00

palo_alto

www.cve.org

0.001 Low

EPSS

Percentile

39.7%

JSON

The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML.

CNA Affected

[
  {
    "product": "Palo Alto Networks PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "affected",
        "version": "PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier."
      }
    ]
  }
]