CVE-2023-0007 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface

A cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed...

CVE-2023-0007

PAN-OS stored XSS in Panorama web interface requires an authenticated read-write administrator to store a JavaScript payload that executes in another administrator’s browser. Affected product: PAN-OS on Panorama appliances. Root cause: insufficient input filtering/escaping for user-supplied data ...

Palo Alto Networks PAN-OS 8.1.x < 8.1.25 / 9.0.x < 9.0.17 / 9.1.x < 9.1.16 / 10.0.x < 10.0.7 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.25 or 9.0.x prior to 9.0.17 or 9.1.x prior to 9.1.16 or 10.0.x prior to 10.0.7. It is, therefore, affected by a vulnerability. - A cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS software...