CVE-2016-9149

CVE-2016-9149 affects Palo Alto Networks PAN-OS. The Addresses Object parser mishandles single quote characters, enabling an XPath injection via a crafted string. A remote authenticated attacker can exploit this in PAN-OS releases prior to fixed versions: 5.0.x < 5.0.20, 5.1.x < 5.1.13, 6.0...

CVE-2016-9149

The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 mishandles single quote characters, which allows remote authenticated users to conduct XPath injection attacks via a...