4.8
Moyenne
CVE-2024-5906 A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious…
Description
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Prisma Cloud Compute 32 | 32 → dernières | Pas de correctif indiqué |
| prisma_cloud | Versions non publiées |
Autres CVE de Prisma Cloud Compute
Les 4 CVE de Prisma Cloud Compute →
CVE-2021-3043
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a…
7.5
Élevée
CVE-2021-3039
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console…
3.8
Faible
CVE-2021-3033
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud…
9.1
Critique