CVE-2013-5664

Paloaltonetworks Pan-os - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.

Exploits (1)

nomisec WORKING POC 2 stars

by phusion · poc

https://github.com/phusion/rails-cve-2012-5664-test

View Code ZIP pw:eip

References (1)

[Various Sources] https://security.paloaltonetworks.com/CVE-2013-5664

Scores

EPSS 0.0064

EPSS Percentile 70.2%

Details

CWE

CWE-79

Status published

Products (30)

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

paloaltonetworks/pan-os

... and 20 more

Published Aug 31, 2013

Tracked Since Feb 18, 2026