EUVD-2022-15248

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Improper authorization in Palo Alto Cortex XSOAR allows users to access restricted incident reports.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-0027	11 May 202216:00	–	attackerkb
Circl	CVE-2022-0027	11 May 202220:34	–	circl
CNNVD	Palo Alto Networks Cortex XSOAR 安全漏洞	11 May 202200:00	–	cnnvd
CVE	CVE-2022-0027	11 May 202216:30	–	cve
Cvelist	CVE-2022-0027 Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports	11 May 202216:30	–	cvelist
NVD	CVE-2022-0027	11 May 202217:15	–	nvd
OSV	CVE-2022-0027	11 May 202217:15	–	osv
Palo Alto Networks	Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports	11 May 202216:00	–	paloalto
Prion	Authorization	11 May 202217:15	–	prion
Positive Technologies	PT-2022-12961 · Palo Alto Networks · Cortex Xsoar	11 May 202200:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "e438a2cd-4ed1-36e1-9c7b-a32232ce106a",
        "vendor": {
          "name": "Palo Alto Networks"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "11030142-ac9f-3f67-b535-d78a0049ca9f",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "6.6 <6.6.0.2585049"
      },
      {
        "id": "78159826-a72d-3f72-a098-ebc9f5f9986a",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "6.1.*"
      },
      {
        "id": "81625e3e-8299-39dc-8264-7cde5c6c7b62",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "6.2.*"
      },
      {
        "id": "a311d3c0-133b-302e-8e75-936e920fbcf6",
        "product": {
          "name": "Cortex XSOAR"
        },
        "product_version": "6.5.*"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2022-0027

03 Oct 2025 20:07Current

5Medium risk

Vulners AI Score5

CVSS 3.14.3

CVSS 24

EPSS0.00149