CVE-2025-0132

A missing authentication vulnerability in Palo Alto Networks Cortex XDR Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.

The attacker must have network access to the Broker VM to exploit this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
UNKNOWN
---
palo_altoCNA
---
---
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://security.paloaltonetworks.com/CVE-2025-0132