CVE-2023-6790
A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - psirt@paloaltonetworks.com
- Published
- 2023-12-13
- Last modified
- 2024-08-02
- Weaknesses
- CWE-79
Affected products
- Cloud Ngfw (Palo Alto Networks)
- Pan-os (Palo Alto Networks)
- Prisma Access (Palo Alto Networks)
- Pan-os (Paloaltonetworks)
References
- https://security.paloaltonetworks.com/CVE-2023-6790
