Cortex Xsoar
Approved changes feed: RSS · Atom
cpe:2.3:a:palo_alto_networks:cortex_xsoar:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Palo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d) |
|---|---|
| Product | Cortex Xsoar (2a50a2e6-2442-5376-a3d3-95043af9aab3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0270 |
vulnerable | 2026-07-29 00:20:49.926102 |
Cortex XSOAR: Path Traversal Vulnerability
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.
Published: 2026-06-10T20:59:00.350Z
Updated: 2026-06-12T03:55:34.115Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3282 |
vulnerable | 2026-06-08 06:09:39.070602 |
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
MEDIUM (6.4)
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
Published: 2023-11-08T17:22:58.976Z
Updated: 2024-08-02T06:48:08.442Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0003 |
not_vulnerable | 2026-06-08 05:52:03.856036 |
Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
MEDIUM (6.5)
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
Published: 2023-02-08T17:22:07.660Z
Updated: 2025-02-13T16:38:40.524Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0031 |
vulnerable | 2026-06-08 05:39:09.186587 |
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
MEDIUM (6.7)
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.
Published: 2022-11-09T17:24:34.557Z
Updated: 2025-05-01T19:10:17.973Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0027 |
vulnerable | 2026-06-08 05:39:09.160472 |
Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports
MEDIUM (4.3)
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.
Published: 2022-05-11T16:30:27.103Z
Updated: 2024-09-16T23:06:08.634Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0020 |
not_vulnerable | 2026-06-08 05:39:09.117202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3051 |
vulnerable | 2026-06-08 05:33:50.747350 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3049 |
vulnerable | 2026-06-08 05:33:50.740204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3044 |
not_vulnerable | 2026-06-08 05:33:50.735490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3034 |
vulnerable | 2026-06-08 05:33:50.709291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.