7.5
Élevée
CVE-2021-3043 A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a…
Description
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. No additional action is required for these instances. This issue impacts: Prisma Cloud Compute 20.12 versions earlier than Prisma Cloud Compute 20.12.552; Prisma Cloud Compute 21.04 versions earlier than Prisma Cloud Compute 21.04.439.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Prisma Cloud Compute 21.04 | 21.04 → < 21.04.439 | 21.04.439 |
| Prisma Cloud Compute 20.12 | 20.12 → < 20.12.552 | 20.12.552 |
Autres CVE de Prisma Cloud Compute
Les 4 CVE de Prisma Cloud Compute →
CVE-2024-5906
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious…
4.8
Moyenne
CVE-2021-3039
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console…
3.8
Faible
CVE-2021-3033
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud…
9.1
Critique