CVE-2014-3764 — Cross-site Scripting in Paloaltonetworks Pan-os

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 52.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Paloaltonetworks Pan-osPaloalto Pan-os
Timeline
PublishedJan 6
Latest updateMay 13

Description

Cross-site scripting (XSS) vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5.0.15, 5.1.x before 5.1.10, and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Ref ID 64563.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶Palo Altopaloalto/pan-os

🔴Vulnerability Details

2
GHSA
GHSA-9995-p9v8-cr26: Cross-site scripting (XSS) vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5↗2022-05-13
▶
CVEList
CVE-2014-3764: Cross-site scripting (XSS) vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5↗2015-01-06
▶

📋Vendor Advisories

1
Palo Alto
Cross-site scripting vulnerability↗2014-12-22
▶
CVE-2014-3764 — Cross-site Scripting | cvebase