Palo Alto Networks Cortex XDR Agent
24 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-0232 | corrigé en 9.0, 8.9, 8.7-CE | Cortex XDR Agent: Local Administrator can disable the agent on Windows | MEDIUM 4.0 | 0.1 % | ||
| CVE-2026-0230 | 8.7-CE – < 8.7.101-CE ; 8.3-CE – < 8.3.102-CE | Cortex XDR Agent: Local Administrator can disable the agent on macOS | MEDIUM 4.0 | 0.1 % | ||
| CVE-2025-0121 | 8.6.0 – < 8.6.1 ; 8.5.0 – < 8.5.2 ; 8.3-CE – < 8.3.101-CE HF ; … | Cortex XDR Agent: Local Windows User Can Crash the Agent | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-0112 | 8.3-CE – < 8.3.101-CE ; 8.4.0 ; 8.5.0 – < 8.5.1 | Cortex XDR Agent: Local Windows User Can Disable the Agent | MEDIUM 6.8 | 0.2 % | ||
| CVE-2024-9469 | 7.9 – < 7.9.102-CE ; 8.3 – < 8.3.1 ; 8.4 – < 8.4.1 | Cortex XDR Agent: Local Windows User Can Disable the Agent | MEDIUM 5.7 | 0.2 % | ||
| CVE-2024-8690 | 7.9.102-CE | Cortex XDR Agent: Local Windows Administrator Can Disable the Agent | MEDIUM 5.6 | 0.2 % | ||
| CVE-2024-5912 | 7.9-CE – < 7.9.102-CE ; 8.2 – < 8.2.2 | Cortex XDR Agent: Improper File Signature Verification Checks | MEDIUM 6.8 | 0.1 % | ||
| CVE-2024-5909 | 8.2.0 – < 8.2.1 ; 8.1.0 – < 8.1.2 ; 7.9-CE – < 7.9.102-CE | Cortex XDR Agent: Local Windows User Can Disable the Agent | MEDIUM 6.8 | 0.4 % | ||
| CVE-2024-5907 | 7.9-CE – < 7.9.102-CE ; 8.1.0 ; 8.2.0 – < 8.2.3 ; … | Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability | MEDIUM 5.2 | 0.1 % | ||
| CVE-2024-5905 | 7.9-CE – < 7.9.102-CE ; 8.1.0 – < 8.1.2 ; 8.2.0 – < 8.2.1 | Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent | LOW 2.0 | 0.1 % | ||
| CVE-2023-3280 | 5.0 ; 7.5-CE ; 7.9 – < 7.9.3 ; … | Cortex XDR Agent: Local Windows User Can Disable the Agent | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-0002 | 7.5 – < 7.5.101-CE ; 5.0 – < 5.0.12.22203 | Cortex XDR Agent: Product Disruption by Local Windows User | HIGH 7.8 | 0.3 % | ||
| CVE-2023-0001 | 7.5 – < 7.5.101-CE | Cortex XDR Agent: Cleartext Exposure of Agent Admin Password | MEDIUM 6.7 | 0.2 % | ||
| CVE-2022-0029 | 7.7 – < 7.7.3 ; 7.5 CE – < 7.5.101-CE ; 5.0 – < 5.0.12-hotfix update | Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-0026 | 7.7.* without CU-330 ; 7.6.* without CU-330 ; 7.5 CE 7.5.* without CU-330 ; … | Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2022-0025 | 7.7 – < 7.7.1.62043 without CU-500 | Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2022-0015 | 5.0 – < 5.0.12 ; 6.1 – < 6.1.9 | Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2022-0014 | 7.2 – < 7.2.4 ; 7.3 – < 7.3.2 ; 5.0 – < 5.0.12 ; … | Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session | HIGH 7.3 | 0.3 % | ||
| CVE-2022-0013 | 7.2 – < 7.2.4 ; 5.0 – < 5.0.12 ; 6.1 – < 6.1.9 ; … | Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-0012 | 5.0 – < 5.0.12 ; 7.2 – < 7.2.4 ; 7.3 – < 7.3.2 ; … | Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2021-3042 | corrigé en 5.0 all | Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation | HIGH 7.8 | 0.2 % | ||
| CVE-2021-3041 | 5.0 – < 5.0.11 ; 6.1 – < 6.1.8 ; 7.2 – < 7.2.3 or without content update 171 or later | Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation | HIGH 7.8 | 0.2 % | ||
| CVE-2020-2049 | 7.1.* without content update 150 ; 7.2.* without content update 150 | Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation | HIGH 7.8 | 0.3 % | ||
| CVE-2020-2020 | 7.0 – < 7.0.3 ; 7.1 – < 7.1.2 ; 5.0 – < 5.0.10 ; … | Cortex XDR Agent: Exceptional condition denial-of-service (DoS) | MEDIUM 5.5 | 0.3 % |