CVE-2024-0010
14.02.2024, 18:15
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a users browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.
| Vendor | Product | Version |
|---|---|---|
| paloaltonetworks | pan-os | 10.1.0 ≤ 𝑥 < 10.1.11 |
| paloaltonetworks | pan-os | 10.1.11 |
| paloaltonetworks | pan-os | 9.1.0 ≤ 𝑥 < 9.1.17 |
| paloaltonetworks | pan-os | 9.0.0 ≤ 𝑥 < 9.0.17 |
| paloaltonetworks | pan-os | 9.0.17 |
| paloaltonetworks | pan-os | 9.0.17:h1 |
| paloaltonetworks | pan-os | 9.0.17:h2 |
| paloaltonetworks | pan-os | 9.0.17:h3 |
𝑥
= Vulnerable software versions