Cross site scripting

2020-05-1319:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

34.0%

JSON

A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalProtect Clientless VPN that can compromise the user’s active session. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.7; All versions of PAN-OS 8.0.

CPENameOperatorVersion
pan-osge8.1.0
pan-oslt8.1.13
pan-osge9.0.0
pan-oslt9.0.7
pan-osge8.0.0
pan-osle8.0.20
pan-osge7.1.0
pan-oslt7.1.26

Name	Operator	Version
pan-os	ge	8.1.0
pan-os	lt	8.1.13
pan-os	ge	9.0.0
pan-os	lt	9.0.7
pan-os	ge	8.0.0
pan-os	le	8.0.20
pan-os	ge	7.1.0
pan-os	lt	7.1.26

References

security.paloaltonetworks.com/CVE-2020-2005

0.001 Low

EPSS

Percentile

34.0%

JSON

Related for PRION:CVE-2020-2005