Skip to content

Vulnerabilities of Palo Alto Networks Cortex XSOAR

Is your version affected?

CVE Summary Score Published
CVE-2026-0270 A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an… 4.8 Medium Jun 10, 2026
CVE-2024-9470 A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view… 5.3 Medium Oct 9, 2024
CVE-2023-3282 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a… 6.4 Medium Nov 8, 2023
CVE-2023-0003 A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user… 6.5 Medium Feb 8, 2023
CVE-2022-0031 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a… 6.7 Medium Nov 9, 2022
CVE-2022-0027 An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in… 4.3 Medium May 11, 2022
CVE-2022-0020 A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an… 6.8 Medium Feb 10, 2022
CVE-2021-3051 An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that… 8.1 High Sep 8, 2021
CVE-2021-3049 An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated… 2.6 Low Sep 8, 2021
CVE-2021-3044 An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker… 9.8 Critical Jun 22, 2021
CVE-2021-3034 An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured… 5.1 Medium Mar 10, 2021

Other Palo Alto Networks products