Cortex Xsoar
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:cortex_xsoar:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Cortex Xsoar (736a1cba-a5d6-5e76-b104-28eb27c69a47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/cortex-xsoar |
purl2cpe | 2026-06-01 10:16:49.847311 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3282 |
vulnerable | 2026-06-08 06:09:39.071561 |
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
MEDIUM (6.4)
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
Published: 2023-11-08T17:22:58.976Z
Updated: 2024-08-02T06:48:08.442Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0003 |
vulnerable | 2026-06-08 05:52:03.856934 |
Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
MEDIUM (6.5)
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
Published: 2023-02-08T17:22:07.660Z
Updated: 2025-02-13T16:38:40.524Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0027 |
vulnerable | 2026-06-08 05:39:09.161899 |
Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports
MEDIUM (4.3)
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.
Published: 2022-05-11T16:30:27.103Z
Updated: 2024-09-16T23:06:08.634Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.