Palo Alto Networks Cortex XSOAR 6.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:-:*:*:*:*:*:*

part: a version: 6.1.0 update: -

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductCortex Xsoar (736a1cba-a5d6-5e76-b104-28eb27c69a47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:sourceforge/cortex-xsoar purl2cpe 2026-06-01 10:16:49.851396

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0027 vulnerable 2026-06-08 05:39:09.162044 Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports
MEDIUM (4.3)
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.
Published: 2022-05-11T16:30:27.103Z
Updated: 2024-09-16T23:06:08.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0020 vulnerable 2026-06-08 05:39:09.118169 Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface
MEDIUM (6.8)
A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.
Published: 2022-02-10T18:10:23.382Z
Updated: 2024-09-16T16:53:59.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3051 vulnerable 2026-06-08 05:33:50.749534 Cortex XSOAR: Authentication Bypass in SAML Authentication
HIGH (8.1)
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.
Published: 2021-09-08T17:10:16.586Z
Updated: 2024-09-17T01:10:46.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3049 vulnerable 2026-06-08 05:33:50.743940 Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability
LOW (2.6)
An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.
Published: 2021-09-08T17:10:14.957Z
Updated: 2024-09-16T20:58:16.361Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.