Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:22.0.35:*:*:*:*:*:*:*

part: a version: 22.0.35 update: *

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductCortex Xdr Broker Vm (bbc9d1dc-6619-5083-b03c-5a6b105ebcfd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0134 vulnerable 2026-06-08 07:00:29.638403 Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM
A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.
Published: 2025-05-14T18:07:54.706Z
Updated: 2026-02-26T18:28:08.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0132 vulnerable 2026-06-08 07:00:29.584569 Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services
A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.  The attacker must have network access to the Broker VM to exploit this issue.
Published: 2025-05-14T18:07:15.351Z
Updated: 2025-05-14T20:51:36.216Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.