Cortex Xdr Agent
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:critical_environment:*:*:*
part: a version: * update: *
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Cortex Xdr Agent (bf5487ae-f1c5-54a5-9a95-d1817cc1c75c) |
| Edition | * |
| Language | * |
| Software edition | critical_environment |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:npm/%40paloaltonetworks/pan-cortex-xdr |
purl2cpe | 2026-06-01 10:16:50.057437 |
pkg:sourceforge/cortex-xdr |
purl2cpe | 2026-06-01 10:16:50.057439 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9469 |
vulnerable | 2026-06-08 07:00:27.811206 |
Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Published: 2024-10-09T17:05:55.091Z
Updated: 2024-10-18T11:55:36.651Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5907 |
vulnerable | 2026-06-08 06:56:17.737083 |
Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Published: 2024-06-12T16:26:39.742Z
Updated: 2024-08-01T21:25:03.047Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0002 |
vulnerable | 2026-06-08 05:52:03.854058 |
Cortex XDR Agent: Product Disruption by Local Windows User
MEDIUM (5.5)
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.
Published: 2023-02-08T17:21:47.711Z
Updated: 2025-03-25T13:57:01.294Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0001 |
vulnerable | 2026-06-08 05:52:03.851618 |
Cortex XDR Agent: Cleartext Exposure of Agent Admin Password
MEDIUM (6)
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.
Published: 2023-02-08T17:20:20.774Z
Updated: 2024-08-02T04:54:32.569Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0029 |
vulnerable | 2026-06-08 05:39:09.185017 |
Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File
MEDIUM (5.5)
An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.
Published: 2022-09-14T16:35:08.910Z
Updated: 2025-06-04T15:08:32.763Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.