CVE-2017-5584

MEDIUM

Paloaltonetworks Pan-os - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1037889

[Various Sources] https://security.paloaltonetworks.com/CVE-2017-5584

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/96371

Scores

CVSS v3 5.4

EPSS 0.0019

EPSS Percentile 41.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-79

Status published

Affected Products (50)

paloaltonetworks/pan-os

... and 35 more

Timeline

Published Mar 15, 2017

Tracked Since Feb 18, 2026