PT-2019-2081 · Palo Alto Networks · Globalprotect Agent

Name of the Vulnerable Software and Affected Versions: GlobalProtect Agent version 4.1.0 for Windows GlobalProtect Agent versions 4.1.10 and earlier for macOS Description: The issue is related to weaknesses in the authentication procedure of the GlobalProtect Agent, which may allow a local...

Palo Alto Networks PAN-OS < 6.1 / 7.x < 7.1 / 8.1.x < 8.1.4 Cross-Site Scripting Vulnerability (PAN-SA-2018-0014)

The version of Palo Alto Networks PAN-OS running on the remote host is prior to 6.1, 7.x prior to 7.1, 8.1.x prior to 8.1.4. It is, therefore, affected by a cross-site scripting XSS vulnerability that exists in PAN-OS GlobalProtect portal login page due to improper validation of user-supplied inp...

The vulnerability of the login page of the GlobalProtect firewall’s web interface allows a hacker to inject arbitrary JavaScript or HTML code.

The vulnerability of the login page of the GlobalProtect web interface in the PAN-OS operating system arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code...

The vulnerability in the web interface of the GlobalProtect operating system PAN-OS allows a hacker to inject arbitrary JavaScript or HTML code.

The vulnerability in the web interface of the GlobalProtect operating system PAN-OS is due to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code...

Palo Alto Networks PAN-OS Cross-Site Scripting Vulnerability (CNVD-2018-21185)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability in the GlobalProtect Portal Login page in versions of Palo Alto Networks PAN-OS prior to 8.1.4 can be exploited by remote attackers to inject...

Hardcoded credentials

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

CVE-2018-10141

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

CVE-2018-10141

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

CVE-2018-10141

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

CVE-2018-10141

Cross-Site Scripting vulnerability CVE-2018-10141 in PAN-OS GlobalProtect Portal Login page allows an unauthenticated attacker to inject arbitrary JavaScript or HTML. Affected: PAN-OS GlobalProtect portal login pages on versions prior to 8.1.4; Palo Alto advisory specifies PAN-OS 8.1.3 and earlie...

Cross-Site Scripting (XSS) in GlobalProtect Portal Login Page

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS GlobalProtect Portal Login page. Ref. PAN-99830; CVE-2018-10141 Successful exploitation of this issue may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 8.1.3 and earlier. PAN-OS 8.0...

Cross-Site Scripting (XSS) in GlobalProtect Portal Login Page

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS GlobalProtect Portal Login page. Ref. PAN-99830; CVE-2018-10141 Successful exploitation of this issue may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 8.1.3 and earlier. PAN-OS 8.0...

Palo Alto Networks PAN-OS Cross-Site Scripting Vulnerability (CNVD-2018-16937)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability exists in the PAN-OS response page for GlobalProtect in Palo Alto Networks PAN-OS versions 6.1.21 and earlier, PAN-OS versions 7.1.18 and earlie...

Code injection

The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected...

CVE-2018-10139

The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected...

CVE-2018-10139

The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected...

CVE-2018-10139

CVE-2018-10139 affects Palo Alto Networks PAN-OS GlobalProtect Gateway. Documents indicate an unauthenticated attacker could inject arbitrary JavaScript/HTML via the GlobalProtect Gateway response. Affected ranges include PAN-OS 6.1.21 and earlier, 7.1.18 and earlier, and 8.0.11 and earlier; PAN-...

CVE-2018-10139

The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected...

Cross-Site Scripting (XSS) in GlobalProtect Gateway

A Cross-Site Scripting XSS vulnerability exists in a PAN-OS response for GlobalProtect Gateway. Ref. PAN-84836; CVE-2018-10139 Successful exploitation of this issue may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 6.1.21 and earlier, PAN-OS...

Cross-Site Scripting (XSS) in GlobalProtect Gateway

A Cross-Site Scripting XSS vulnerability exists in a PAN-OS response for GlobalProtect Gateway. Ref. PAN-84836; CVE-2018-10139 Successful exploitation of this issue may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 6.1.21 and earlier, PAN-OS...