CVE-2017-5584

Cross-site scripting XSS vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-5584

CVE-2017-5584 is a cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS Management Web Interface. Affected PAN-OS versions: 5.1; 6.x prior to 6.1.16; 7.0.x prior to 7.0.13; 7.1.x prior to 7.1.8. The issue allows remote authenticated users to inject arbitrary web script or HTML vi...

CVE-2017-5583: Exposure of Sensitive Information to an Unauthorized Actor

The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2017-5584: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Palo Alto PAN-OS Detail Information Disclosure in the Management Web Interface

PAN-OS contains a post-authentication vulnerability that may allow for Information Disclosure. Successful exploitation allows an attacker to download arbitrary files from a folder. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

Palo Alto PAN-OS Cross-Site Scripting in the Management Web Interface

A persistent cross-site scripting XSS vulnerability exists in the management web interface. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Palo Alto PAN-OS Kernel Vulnerability

A vulnerability exists in the kernel of PAN-OS that may result in an elevation of privilege. This issue is publicly known as Dirty COW. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Information Disclosure in the Management Web Interface

A vulnerability exists in the Management Web Interface that could result in Information Disclosure. Ref PAN-70428 / CVE-2017-5583 PAN-OS contains a post-authentication vulnerability that may allow for Information Disclosure. Successful exploitation allows an attacker to download arbitrary files...

Information Disclosure in the Management Web Interface

A vulnerability exists in the Management Web Interface that could result in Information Disclosure. Ref PAN-70428 / CVE-2017-5583 PAN-OS contains a post-authentication vulnerability that may allow for Information Disclosure. Successful exploitation allows an attacker to download arbitrary files...

Cross-Site Scripting in the Management Web Interface

A persistent cross-site scripting XSS vulnerability exists in the management web interface ref PAN-66838 / CVE-2017-5584. PAN-OS contains a post-authentication vulnerability that may allow for a persistent cross-site scripting XSS attack of the management web interface. Successful exploitation of...

Cross-Site Scripting in the Management Web Interface

A persistent cross-site scripting XSS vulnerability exists in the management web interface ref PAN-66838 / CVE-2017-5584. PAN-OS contains a post-authentication vulnerability that may allow for a persistent cross-site scripting XSS attack of the management web interface. Successful exploitation of...

Kernel Vulnerability

A vulnerability exists in the kernel of PAN-OS that may result in an elevation of privilege. This issue is publicly known as Dirty COW ref PAN-68074 / CVE-2016-5195. PAN-OS may be impacted by the Dirty COW CVE-2016-5195 attack. A race condition was found in the way the Linux kernel's memory...

Kernel Vulnerability

A vulnerability exists in the kernel of PAN-OS that may result in an elevation of privilege. This issue is publicly known as Dirty COW ref PAN-68074 / CVE-2016-5195. PAN-OS may be impacted by the Dirty COW CVE-2016-5195 attack. A race condition was found in the way the Linux kernel's memory...

PT-2017-16591

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.1 through 7.1.7 Palo Alto Networks PAN-OS version 6.x before 6.1.16 Palo Alto Networks PAN-OS version 7.0.x before 7.0.13 However, considering the ranges and versions provided, the most concise form is: Pal...

PT-2017-16590

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 6.1.15 and earlier Palo Alto Networks PAN-OS versions 7.0.12 and earlier Palo Alto Networks PAN-OS versions 7.1.7 and earlier Description A post-authentication issue in the Management Web Interface may allow...

Palo Alto Networks PAN-OS < 7.1.7 Unified Log View Information Disclosure

The version of Palo Alto Networks PAN-OS running on the remote host is prior to 7.1.7. It is, therefore, affected by an information disclosure vulnerability in the unified log view component that allows an authenticated, remote attacker to view threat logs even if viewing privileges are disabled....

Palo Alto PAN-OS DoS Vulnerability (PAN-SA-2016-0027)

Palo Alto PAN-OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Palo Alto Networks PAN-OS Management Interface Remote DoS (PAN-SA-2016-0027)

The Palo Alto Networks PAN-OS running on the remote host is affected by a NULL pointer dereference flaw in the web management interface, specifically in the parseRange function within file rx.c, when handling HTTP requests involving a Range header with an empty value. An unauthenticated, remote...

Palo Alto Networks PAN-OS 7.0.x < 7.0.12 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x prior to 7.0.12. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when processing IPv6 traffic matching a predict session. An unauthenticated, remote attacker can exploi...

Palo Alto Networks PAN-OS 5.0.x < 5.0.20 / 5.1.x < 5.1.13 / 6.0.x < 6.0.15 / 6.1.x < 6.1.15 / 7.0.x < 7.0.11 / 7.1.x < 7.1.6 Multiple Vulnerabilities (PAN-SA-2016-0033 / PAN-SA-2016-0034 / PAN-SA-2016-0035 / PAN-SA-2016-0037)

The version of Palo Alto Networks PAN-OS running on the remote host is 5.0.x prior to 5.0.20, 5.1.x prior to 5.1.13, 6.0.x prior to 6.0.15, 6.1.x prior to 6.1.15, 7.0.x prior to 7.0.11, or 7.1.x prior to 7.1.6. It is, therefore, affected by multiple vulnerabilities : - An information disclosure...