Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

20 records

Priority LOW 18

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.

CVSS 4.0MEDIUM 4.0 Local High privileges No interaction EPSS 0.00146 Published 2026-04-13 Fixed in 9.1.0, 9.0 +7 CWE-15
Priority LOW 25

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00212 Published 2024-10-09 Fixed in 7.9.102-CE, 8.3.1 +4 CWE-754
Priority LOW 24

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent.

CVSS 4.0MEDIUM 5.6 Local High privileges No interaction EPSS 0.00188 Published 2024-09-11 Fixed in 8.5, 8.4 +3 CWE-440
Priority LOW 30

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.0041 Published 2024-06-12 Fixed in 8.4.0, 8.3.0 +3 CWE-269
Priority LOW 25

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges.

CVSS 4.0MEDIUM 5.2 Local Low privileges No interaction EPSS 0.0013 Published 2024-06-12 Fixed in 7.9.102-CE, 8.2.3 +2 CWE-269
Priority LOW 9

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00089 Published 2024-06-12 Fixed in 7.9.102-CE, 8.1.2 +3 CWE-346
Priority LOW 25

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00324 Published 2023-09-13 Fixed in 7.9.3, 7.9.101-CE +2 CWE-755
Priority LOW 34

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00295 Published 2023-02-08 Fixed in 7.9 All, 7.8 All +2 CWE-693
Priority LOW 29

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00213 Published 2023-02-08 Fixed in 7.9 All, 7.8 All +2 CWE-319
Priority LOW 24

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00217 Published 2022-09-14 Fixed in 7.7.3, 7.5.101-CE +2 CWE-59
Priority LOW 29

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00227 Published 2022-05-11 No fix listed CWE-282
Priority LOW 29

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00244 Published 2022-05-11 Fixed in 7.7.1.62043 without CU-500, 7.6 all +5 CWE-427
Priority LOW 32

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00259 Published 2022-01-12 Fixed in 7.2.4, 7.3.2 +2 CWE-426
Priority LOW 24

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a s…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00227 Published 2022-01-12 Fixed in 7.2.4, 5.0.12 +2 CWE-538
Priority LOW 31

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integri…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00251 Published 2022-01-12 Fixed in 5.0.12, 7.2.4 +2 CWE-59
Priority LOW 34

A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2021-06-10 Fixed in 5.0.11, 6.1.8 +1 CWE-427
Priority LOW 25

An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent f…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00307 Published 2020-12-09 Fixed in 7.0.3, 7.1.2 +3 CWE-755