CVE-2015-4162

XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
paloaltonetworkspan-os
𝑥
≤ 5.0.15
paloaltonetworkspan-os
6.0
paloaltonetworkspan-os
6.0.1
paloaltonetworkspan-os
6.0.2
paloaltonetworkspan-os
6.0.3
paloaltonetworkspan-os
6.0.4
paloaltonetworkspan-os
6.0.5
paloaltonetworkspan-os
6.0.6
paloaltonetworkspan-os
6.0.7
paloaltonetworkspan-os
6.1.0
paloaltonetworkspan-os
6.1.1
paloaltonetworkspan-os
6.1.2
paloaltonetworkspan-os
6.1.3
𝑥
= Vulnerable software versions