5.3
Medium
CVE-2024-9470 A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
Description
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XSOAR 8.0 | earliest → < 8.0.0 | 8.0.0 |
| Cortex XSOAR 6.13 | earliest → < 6.13.0 | 6.13.0 |
| Cortex XSOAR 6.12 | 6.12.0 → latest | No fix stated |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Cortex XSOAR
The 11 CVEs of Cortex XSOAR →
CVE-2026-0270
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
4.8
Medium
CVE-2023-3282
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.4
Medium
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Medium
CVE-2022-0031
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.7
Medium