CVE-2025-4233 Prisma Access Browser: Inappropriate implementation in Cache

An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies...

CVE-2025-4233

CVE-2025-4233 affects Palo Alto Networks Prisma Access Browser. The connected sources describe an insufficient implementation of cache vulnerability that enables bypassing certain data control policies (root cause: inadequate cache handling in the browser). Documents consistently tie the issue to...

Palo Alto Networks Prisma Access Browser 安全漏洞

Palo Alto Networks Prisma Access Browser is an enterprise security browser from Palo Alto Networks, Inc. A security vulnerability exists in Palo Alto Networks Prisma Access Browser that stems from an insufficient cache implementation that could lead to the bypassing of data control policies...

PT-2025-25361 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as ...

PT-2025-25359 · Palo Alto Networks · Palo Alto Networks Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Prisma Access Browser affected versions not specified Description: The issue is related to an insufficient implementation of cache vulnerability in the browser, which allows users to bypass certain data control policies. Th...

Malicious code in prisma-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b3fdf58e70f2fc4164fb32fc018d7733a72f3596dbc80e34855240d2c3be548 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4447 Malicious code in prisma-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b3fdf58e70f2fc4164fb32fc018d7733a72f3596dbc80e34855240d2c3be548 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-21414

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...

CVE-2021-21415

Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settings, for example by downloading a proje...

CVE-2021-21310

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

The vulnerability in the web interface of the Prisma Cloud Compute security platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the Prisma Cloud Compute security platform is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

CVE-2025-0138

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue...

CVE-2025-0138

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue...

CVE-2025-0130

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this...

CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue...

CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue...

CVE-2025-0138

CVE-2025-0138 affects Palo Alto Networks Prisma Cloud Compute Edition. Web sessions in the Compute Edition web interface do not expire when users are deleted, allowing potential unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected. CVSS-like metrics indicate low overall...

PT-2025-21214 · Palo Alto Networks · Palo Alto Networks Prisma Cloud Compute Edition

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Prisma Cloud Compute Edition affected versions not specified Description: The issue arises because web sessions in the web interface of Palo Alto Networks Prisma Cloud Compute Edition do not expire when users are deleted...

Palo Alto Networks Prisma Cloud Compute Edition 代码问题漏洞

Palo Alto Networks Prisma Cloud Compute Edition is a cloud-native security platform from U.S.-based Palo Alto Networks that provides full lifecycle protection for containers, hosts, and serverless workloads. A security vulnerability exists in Palo Alto Networks Prisma Cloud Compute Edition that...

Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h14 / 10.2.x < 10.2.11 / 11.0.x < 11.0.7 / 11.1.x < 11.1.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h14, 10.2.x prior to 10.2.11, 11.0.x prior to 11.0.7, or 11.1.x prior to 11.1.5. It is, therefore, affected by a vulnerability. Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks...