nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-4618 CVE-2025-4618
MEDIUM
Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser
Record summary
CVE-2025-4618 has a selected CVSS score of 4.4 (medium).
Description
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 17, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Prisma BrowserBrowse Palo Alto Networks / Prisma BrowserDefault status: unaffected | CVE List | 142.15.6.0 to ≤ 142.15.6.60 | affected |
References
2security.paloaltonetworks.comVendor advisory
https://security.paloaltonetworks.com/CVE-2025-4618