Palo Alto Networks Cortex XSOAR
11 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-0270 | 8.13 – < 8.13.0.11 | Cortex XSOAR: Path Traversal Vulnerability | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-9470 | 6.12.0 – < 6.12.0 (Build 1271551) | Cortex XSOAR: Information Disclosure Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2023-3282 | 6.10 – < 6.10.0.250144 | Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-0003 | 6.10.0.0 – < 6.10.0.185964 ; 6.9 – < 6.9.B185415 ; 6.8 – < 6.8.B185719 ; … | Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server | MEDIUM 6.5 | 1.3 % | ||
| CVE-2022-0031 | 6.9.0.0 – < 6.9.0.130766 ; 6.8.0.0 ; 6.6.0.0 ; … | Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine | MEDIUM 6.7 | 0.1 % | ||
| CVE-2022-0027 | 6.1.* ; 6.2.* ; 6.5.* ; … | Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports | MEDIUM 4.3 | 0.5 % | ||
| CVE-2022-0020 | 6.1.0 all ; 6.2.0 – < 1958888 | Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface | MEDIUM 6.8 | 1.7 % | ||
| CVE-2021-3051 | 5.5.0 – < 1578677 ; 6.0.2 – < 1576452 ; 6.1.0 – < 1578663 ; … | Cortex XSOAR: Authentication Bypass in SAML Authentication | HIGH 8.1 | 0.6 % | ||
| CVE-2021-3049 | 5.5.0 all ; 6.1.0 – < 12099345 | Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability | MEDIUM 4.3 | 0.5 % | ||
| CVE-2021-3044 | 1016923 – < 6.1.0* ; 6.2.0 – < 1271065 | Cortex XSOAR: Unauthorized Usage of the REST API | CRITICAL 9.8 | 1.4 % | ||
| CVE-2021-3034 | 5.5.0 – < 98622 ; 6.0.2 – < 98623 ; 6.0.1 – < 830029 ; … | Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs | MEDIUM 5.1 | 0.2 % |