6.4
Medium
CVE-2023-3282 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
Description
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XSOAR 8 | earliest → < 8 | 8 |
| Cortex XSOAR 6.12 | earliest → < 6.12 | 6.12 |
| Cortex XSOAR 6.11 | earliest → < 6.11 | 6.11 |
| Cortex XSOAR 6.10 | 6.10 → < 6.10.0.250144 | 6.10.0.250144 |
| cortex_xsoar 6.10 | 6.10.0 → < 6.10.0.250144 | 6.10.0.250144 |
Other CVEs of Cortex XSOAR
The 11 CVEs of Cortex XSOAR →
CVE-2026-0270
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
4.8
Medium
CVE-2024-9470
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
5.3
Medium
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Medium
CVE-2022-0031
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.7
Medium