Cortex Xdr Agent
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Cortex Xdr Agent (bf5487ae-f1c5-54a5-9a95-d1817cc1c75c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:npm/%40paloaltonetworks/pan-cortex-xdr |
purl2cpe | 2026-06-01 10:16:50.009832 |
pkg:sourceforge/cortex-xdr |
purl2cpe | 2026-06-01 10:16:50.009833 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5907 |
vulnerable | 2026-06-08 06:56:17.737135 |
Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Published: 2024-06-12T16:26:39.742Z
Updated: 2024-08-01T21:25:03.047Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5905 |
vulnerable | 2026-06-08 06:56:17.725048 |
Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability.
Published: 2024-06-12T16:20:35.039Z
Updated: 2024-08-01T21:25:03.270Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3280 |
vulnerable | 2026-06-08 06:09:39.064428 |
Cortex XDR Agent: Local Windows User Can Disable the Agent
MEDIUM (5.5)
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.
Published: 2023-09-13T16:13:29.266Z
Updated: 2024-09-25T17:48:34.264Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0002 |
vulnerable | 2026-06-08 05:52:03.853908 |
Cortex XDR Agent: Product Disruption by Local Windows User
MEDIUM (5.5)
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.
Published: 2023-02-08T17:21:47.711Z
Updated: 2025-03-25T13:57:01.294Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0029 |
vulnerable | 2026-06-08 05:39:09.183977 |
Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File
MEDIUM (5.5)
An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.
Published: 2022-09-14T16:35:08.910Z
Updated: 2025-06-04T15:08:32.763Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0025 |
vulnerable | 2026-06-08 05:39:09.130946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0015 |
vulnerable | 2026-06-08 05:39:09.106468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0014 |
vulnerable | 2026-06-08 05:39:09.102490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0013 |
vulnerable | 2026-06-08 05:39:09.101498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0012 |
vulnerable | 2026-06-08 05:39:09.099707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3041 |
vulnerable | 2026-06-08 05:33:50.729540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2049 |
vulnerable | 2026-06-08 05:24:58.780781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2020 |
vulnerable | 2026-06-08 05:24:58.750098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.