EUVD-2021-26403

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Improper cryptographic signature verification in Cortex XSOAR allows unauthorized access to resources.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-3051	8 Sep 202120:45	–	circl
CNNVD	Palo Alto Cortex XSOAR 数据伪造问题漏洞	8 Sep 202100:00	–	cnnvd
CVE	CVE-2021-3051	8 Sep 202117:10	–	cve
Cvelist	CVE-2021-3051 Cortex XSOAR: Authentication Bypass in SAML Authentication	8 Sep 202117:10	–	cvelist
NVD	CVE-2021-3051	8 Sep 202117:15	–	nvd
OSV	CVE-2021-3051	8 Sep 202117:15	–	osv
Palo Alto Networks	Cortex XSOAR: Authentication Bypass in SAML Authentication	8 Sep 202116:00	–	paloalto
Prion	Design/Logic Flaw	8 Sep 202117:15	–	prion
Veracode	Denial Of Service (DoS)	20 May 202107:58	–	veracode

[
  {
    "enisaIdVendor": [
      {
        "id": "0d1cd675-f770-360f-96ea-a4f37f408568",
        "vendor": {
          "name": "Palo Alto Networks"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "54a13dce-8b3f-31f6-860e-07fbfe2d2bae",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "6.1.0 <1578663"
      },
      {
        "id": "597510f5-bb4d-3261-bfc0-85662c15d0c1",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "6.0.2 <1576452"
      },
      {
        "id": "b714007b-8389-35ec-a0d1-466db7917080",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "5.5.0 <1578677"
      },
      {
        "id": "df4aa529-812f-3864-affd-29ea4bf39c7f",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "6.2.0 <1578666"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2021-3051
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.1

CVSS 26.8

EPSS0.00141