Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Palo Alto Networks Cortex XDR Agent 5.0.12, 6.1.9 and 2 more versions Clear all filters
TI-2022-00009 CVE-2022-0014 · GHSA-g6g5-57j8-8359

Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session

Priority LOW 32

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00259 Published 2022-01-12 Fixed in 7.2.4, 7.3.2 +2 CWE-426
TI-2022-00008 CVE-2022-0013 · GHSA-wmg3-55rj-pwcx

Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File

Priority LOW 24

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a s…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00227 Published 2022-01-12 Fixed in 7.2.4, 5.0.12 +2 CWE-538
TI-2022-00007 CVE-2022-0012 · GHSA-pfmg-rqq5-8mr8

Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability

Priority LOW 31

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integri…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00251 Published 2022-01-12 Fixed in 5.0.12, 7.2.4 +2 CWE-59