Palo Alto Networks Cortex XSOAR 6.1.0 1271079
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1271079:*:*:*:*:*:*
part: a version: 6.1.0 update: 1271079
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Cortex Xsoar (736a1cba-a5d6-5e76-b104-28eb27c69a47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/cortex-xsoar |
purl2cpe | 2026-06-01 10:16:49.851405 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-0020 |
vulnerable | 2026-06-08 05:39:09.122652 |
Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface
MEDIUM (6.8)
A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.
Published: 2022-02-10T18:10:23.382Z
Updated: 2024-09-16T16:53:59.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3051 |
vulnerable | 2026-06-08 05:33:50.751934 |
Cortex XSOAR: Authentication Bypass in SAML Authentication
HIGH (8.1)
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.
Published: 2021-09-08T17:10:16.586Z
Updated: 2024-09-17T01:10:46.128Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.