Skip to content
Sign in
6.5 Medium

CVE-2023-0003 A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…

Description

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

Affected products and versions

Product Affected versions Fixed in
Cortex XSOAR 6.10 6.10.0.0 → < 6.10.0.185964 6.10.0.185964
Cortex XSOAR 6.9 earliest → < 6.9.B185415 6.9.B185415
Cortex XSOAR 6.8 earliest → < 6.8.B185719 6.8.B185719
Cortex XSOAR 6.6 earliest → < 6.6.B186115 6.6.B186115

Other CVEs of Cortex XSOAR

The 11 CVEs of Cortex XSOAR →
CVE-2026-0270 A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an… 4.8 Medium CVE-2024-9470 A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view… 5.3 Medium CVE-2023-3282 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a… 6.4 Medium CVE-2022-0031 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a… 6.7 Medium
Track this CVE