CVE-2019-1566

The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML.

Score

CVSS 3.1 6.1 Medium

Status

Modified - psirt@paloaltonetworks.com

Published

2019-01-30

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Palo Alto Networks Pan-os (Palo Alto Networks)
• Pan-os (Paloaltonetworks)

References

• http://www.securityfocus.com/bid/106750
• https://security.paloaltonetworks.com/CVE-2019-1566
• https://www.purplemet.com/blog/palo-alto-firewall-multiple-xss-vulnerabilities