CVE-2026-0234

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...

CVE-2026-0234

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...

CVE-2026-0234

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...

EUVD-2024-49348

Malicious code in bioql PyPI...

Impact of CVE-2024-1135

The Palo Alto Networks Product Security Assurance team has evaluated CVE-2024-1135 as it applies to our products. The Broker VM used in following products is vulnerable to CVE-2024-1135: Cortex XDR Cortex XSIAM Work around: No workaround or mitigation is available...

CVE-2024-8689

A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of the configured ActiveMQ credentials in log bundles...

CVE-2024-8689 ActiveMQ Content Pack: Cleartext Exposure of Credentials

A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of the configured ActiveMQ credentials in log bundles...

CVE-2024-8689

CVE-2024-8689 involves the ActiveMQ integration in Cortex XSOAR and Cortex XSIAM , where credentials configured for ActiveMQ can be exposed in cleartext within log bundles. The vulnerability stems from how credentials are stored/logged by the ActiveMQ integration, leading to potential confidentia...

PT-2024-7785 · Palo Alto Networks +1 · Cortex Xsiam +2

Name of the Vulnerable Software and Affected Versions: Cortex XSOAR and Cortex XSIAM affected versions not specified Description: The issue is related to the storage of protected information in an unencrypted form in the ActiveMQ message broker integration. This could allow a remote attacker to...