CVE-2017-15941

MEDIUM

Palo Alto Networks PAN-OS < 6.1.19, 7.0.x < 7.0.19, 7.1.x < 7.1.14, 8.0.x < 8.0.7 - Cross-Site Scripting

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102446

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1040147

Various Sources x_refsource_confirm

https://security.paloaltonetworks.com/CVE-2017-15941

Scores

CVSS v3 6.1

EPSS 0.0059

EPSS Percentile 69.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

paloaltonetworks/pan-os < 6.1.19

Published Jan 10, 2018

Tracked Since Feb 18, 2026