Prisma Cloud
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:prisma_cloud:*:*:*:*:compute:*:*:*
part: a version: * update: *
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Prisma Cloud (73e36dcd-c648-5e06-a9ab-c9c059c7a5e4) |
| Edition | * |
| Language | * |
| Software edition | compute |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/prisma-cloud |
purl2cpe | 2026-06-01 10:16:50.008426 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5906 |
not_vulnerable | 2026-06-08 06:56:17.733606 |
Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.
Published: 2024-06-12T16:22:38.881Z
Updated: 2024-08-01T21:25:03.163Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5906 |
vulnerable | 2026-06-08 06:56:17.733541 |
Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.
Published: 2024-06-12T16:22:38.881Z
Updated: 2024-08-01T21:25:03.163Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3043 |
vulnerable | 2026-06-08 05:33:50.735022 |
Prisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console
HIGH (7.5)
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. No additional action is required for these instances. This issue impacts: Prisma Cloud Compute 20.12 versions earlier than Prisma Cloud Compute 20.12.552; Prisma Cloud Compute 21.04 versions earlier than Prisma Cloud Compute 21.04.439.
Published: 2021-07-15T16:45:13.845Z
Updated: 2024-09-17T01:21:53.231Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3039 |
vulnerable | 2026-06-08 05:33:50.726824 |
Prisma Cloud Compute: User role authorization secret for Console leaked through log file export
LOW (3.8)
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log files can use this secret to gain Administrator role access for their active session in Prisma Cloud Compute. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. This issue impacts all Prisma Cloud Compute versions earlier than Prisma Cloud Compute 21.04.412.
Published: 2021-06-10T12:33:06.234Z
Updated: 2024-09-17T01:50:54.050Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.