CVE-2019-1565

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.

Score

CVSS 3.0 5.4 Medium

Status

Modified - psirt@paloaltonetworks.com

Published

2019-01-30

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Palo Alto Networks Pan-os (Palo Alto Networks)
• Pan-os (Paloaltonetworks)

References

• http://www.securityfocus.com/bid/106752
• https://security.paloaltonetworks.com/CVE-2019-1565