Palo Alto Networks Cortex XSOAR 5.5.0 78518
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:78518:*:*:*:*:*:*
part: a version: 5.5.0 update: 78518
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Cortex Xsoar (736a1cba-a5d6-5e76-b104-28eb27c69a47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/cortex-xsoar |
purl2cpe | 2026-06-01 10:16:49.847318 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3051 |
vulnerable | 2026-06-08 05:33:50.747600 |
Cortex XSOAR: Authentication Bypass in SAML Authentication
HIGH (8.1)
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.
Published: 2021-09-08T17:10:16.586Z
Updated: 2024-09-17T01:10:46.128Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3049 |
vulnerable | 2026-06-08 05:33:50.742409 |
Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability
LOW (2.6)
An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.
Published: 2021-09-08T17:10:14.957Z
Updated: 2024-09-16T20:58:16.361Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3034 |
vulnerable | 2026-06-08 05:33:50.713044 |
Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs
MEDIUM (5.1)
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.
Published: 2021-03-10T18:10:13.665Z
Updated: 2024-09-16T16:38:50.120Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.