CVE-2013-5664
31.08.2013, 17:55
Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.
| Vendor | Product | Version |
|---|---|---|
| paloaltonetworks | pan-os | 4.0.0 |
| paloaltonetworks | pan-os | 4.0.1 |
| paloaltonetworks | pan-os | 4.0.2 |
| paloaltonetworks | pan-os | 4.0.3 |
| paloaltonetworks | pan-os | 4.0.4 |
| paloaltonetworks | pan-os | 4.0.5 |
| paloaltonetworks | pan-os | 4.0.6 |
| paloaltonetworks | pan-os | 4.0.7 |
| paloaltonetworks | pan-os | 4.0.8 |
| paloaltonetworks | pan-os | 4.1.0 |
| paloaltonetworks | pan-os | 4.1.1 |
| paloaltonetworks | pan-os | 4.1.2 |
| paloaltonetworks | pan-os | 4.1.3 |
| paloaltonetworks | pan-os | 4.1.4 |
| paloaltonetworks | pan-os | 4.1.5 |
| paloaltonetworks | pan-os | 4.1.6 |
| paloaltonetworks | pan-os | 4.1.7 |
| paloaltonetworks | pan-os | 4.1.8 |
| paloaltonetworks | pan-os | 4.1.8-h3 |
| paloaltonetworks | pan-os | 4.1.9 |
| paloaltonetworks | pan-os | 4.1.10 |
| paloaltonetworks | pan-os | 4.1.11 |
| paloaltonetworks | pan-os | 4.1.12 |
| paloaltonetworks | pan-os | 5.0.0 |
| paloaltonetworks | pan-os | 5.0.0-h1 |
| paloaltonetworks | pan-os | 5.0.2 |
| paloaltonetworks | pan-os | 5.0.3 |
| paloaltonetworks | pan-os | 5.0.4 |
| paloaltonetworks | pan-os | 5.0.5 |
𝑥
= Vulnerable software versions