Vulnerabilities

TI-2020-01933 CVE-2020-2017 · GHSA-rh92-6783-v73r

PAN-OS: DOM-Based cross site scripting vulnerability in management web interface

MEDIUM 40

A DOM-Based Cross Site Scripting Vulnerability exists in PAN-OS and Panorama Management Web Interfaces.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00828 Published 2020-05-13 Fixed in 7.1.26, 8.1.13 +2 CWE-79

TI-2020-01932 CVE-2020-2016 · GHSA-phhf-m45q-vcxw

PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation

LOW 32

A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root privilege escalation from a limited linux user account.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00568 Published 2020-05-13 Fixed in 7.1.26, 8.1.13 +2 CWE-377

Vulnerabilities

Filters

PAN-OS: DOM-Based cross site scripting vulnerability in management web interface

PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation