CVE-2017-12416: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to...

XML External Entity (XXE) in PAN-OS

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface that could allow for XML External Entity XXE attack. PAN-OS does not properly parse XML input. Ref PAN-75688 / CVE-2017-9458 Successful exploitation of this issue may allow disclosure of information, denial o...

XML External Entity (XXE) in PAN-OS

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface that could allow for XML External Entity XXE attack. PAN-OS does not properly parse XML input. Ref PAN-75688 / CVE-2017-9458 Successful exploitation of this issue may allow disclosure of information, denial o...

Cross-Site Scripting in PAN-OS

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface. This issue could allow for a cross-site scripting XSS attack. PAN-OS does not properly validate specific request parameters. Ref PAN-76003 / CVE-2017-12416 Successful exploitation of this issue may allow an...

Cross-Site Scripting in PAN-OS

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface. This issue could allow for a cross-site scripting XSS attack. PAN-OS does not properly validate specific request parameters. Ref PAN-76003 / CVE-2017-12416 Successful exploitation of this issue may allow an...

PT-2017-12544

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 6.1.18 Palo Alto Networks PAN-OS versions 7.0.x prior to 7.0.17 Palo Alto Networks PAN-OS versions 7.1.x prior to 7.1.12 Palo Alto Networks PAN-OS versions 8.0.x prior to 8.0.3 Description A cross-si...

PT-2017-2912

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 6.1.18 PAN-OS versions 7.0.x prior to 7.0.17 PAN-OS versions 7.1.x prior to 7.1.12 PAN-OS versions 8.0.x prior to 8.0.3 Description The issue is related to an XML external entity XXE vulnerability in the GlobalProtect...

CVE-2017-9459

Cross-site scripting XSS vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9467

Cross-site scripting XSS vulnerability in the GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name...

Cross site scripting

Cross-site scripting XSS vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9459

CVE-2017-9459 is a cross-site scripting (XSS) vulnerability in the PAN-OS management web interface of Palo Alto Networks devices. The issue is described as a reflected XSS in PAN-OS versions affected: 6.1.x prior to 6.1.18, 7.x prior to 7.0.16/7.1.x prior to 7.1.11, and 8.x prior to 8.0.3, with e...

CVE-2017-8390

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name...

CVE-2017-8390

The PAN-OS DNS Proxy contains a remote code execution vulnerability (CVE-2017-8390) that can be triggered by processing a specially crafted FQDN. Affected PAN-OS versions: 6.1.x prior to 6.1.18; 7.x prior to 7.0.16 (6.1.x, 7.0.x, 7.1.x, 8.x). Palo Alto Networks and CNVD indicate exploitation coul...

CVE-2017-9467: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9459: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-8390: Improper Input Validation

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name...

Palo Alto Networks PAN-OS Cross-Site Scripting Vulnerability (CNVD-2017-20479)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability exists in the GlobalProtect external interface in Palo Alto Networks PAN-OS. A remote attacker could exploit this vulnerability to inject...

Palo Alto PAN-OS NTP Vulnerabilities

The Network Time Protocol NTP library has been found to contains two vulnerabilities CVE-2016-9042 and CVE-2017-6460. Palo Alto Networks software makes use of the vulnerable library and may be affected. This issue only affects the management plane of the firewall. SPDX-FileCopyrightText: 2017...