Cortex Xsoar (Paloaltonetworks) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 55 known versions, newest CVE from 2026-06-10. Vendor: Paloaltonetworks.
CVEs of Cortex Xsoar
- CVE-2026-0270 - CVSS 7.5 (high), 2026-06-10: A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network,…
- CVE-2026-0234 - CVSS 9.1 (critical), 2026-04-13: An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that…
- CVE-2024-9470 - CVSS 5.3 (medium), 2024-10-09: A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
- CVE-2023-3282 - CVSS 6.7 (medium), 2023-11-08: A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local…
- CVE-2023-0003 - CVSS 6.5 (medium), 2023-02-08: A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read…
- CVE-2022-0031 - CVSS 6.7 (medium), 2022-11-09: A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local…
- CVE-2022-0027 - CVSS 4.3 (medium), 2022-05-11: An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email…
- CVE-2022-0020 - CVSS 6.8 (medium), 2022-02-10: A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a…
- CVE-2021-3049 - CVSS 4.3 (medium), 2021-09-08: An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read…
- CVE-2021-3051 - CVSS 8.1 (high), 2021-09-08: An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based…
- CVE-2021-3044 - CVSS 9.8 (critical), 2021-06-22: An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR…
- CVE-2021-3034 - CVSS 5.1 (medium), 2021-03-10: An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO)…
