6.7
Medium
CVE-2022-0031 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
Description
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XSOAR 6.9 | 6.9.0.0 → < 6.9.0.130766 | 6.9.0.130766 |
| Cortex XSOAR | 6.8.0.0 | No fix stated |
| Cortex XSOAR | 6.6.0.0 | No fix stated |
| Cortex XSOAR | 6.5.0.0 | No fix stated |
Other CVEs of Cortex XSOAR
The 11 CVEs of Cortex XSOAR →
CVE-2026-0270
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
4.8
Medium
CVE-2024-9470
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
5.3
Medium
CVE-2023-3282
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.4
Medium
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Medium