Palo Alto Networks PAN-OS < 6.1 / 7.x < 7.1 / 8.1.x < 8.1.4 Cross-Site Scripting Vulnerability (PAN-SA-2018-0014)

The version of Palo Alto Networks PAN-OS running on the remote host is prior to 6.1, 7.x prior to 7.1, 8.1.x prior to 8.1.4. It is, therefore, affected by a cross-site scripting XSS vulnerability that exists in PAN-OS GlobalProtect portal login page due to improper validation of user-supplied inp...

CVE-2018-10141

Cross-Site Scripting vulnerability CVE-2018-10141 in PAN-OS GlobalProtect Portal Login page allows an unauthenticated attacker to inject arbitrary JavaScript or HTML. Affected: PAN-OS GlobalProtect portal login pages on versions prior to 8.1.4; Palo Alto advisory specifies PAN-OS 8.1.3 and earlie...

Cross-Site Scripting (XSS) in GlobalProtect Portal Login Page

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS GlobalProtect Portal Login page. Ref. PAN-99830; CVE-2018-10141 Successful exploitation of this issue may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 8.1.3 and earlier. PAN-OS 8.0...