Palo Alto Networks Cortex XSOAR 6.2.0 1822745
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1822745:*:*:*:*:*:*
part: a version: 6.2.0 update: 1822745
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Cortex Xsoar (736a1cba-a5d6-5e76-b104-28eb27c69a47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/cortex-xsoar |
purl2cpe | 2026-06-01 10:16:49.851415 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-0020 |
vulnerable | 2026-06-08 05:39:09.127385 |
Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface
MEDIUM (6.8)
A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.
Published: 2022-02-10T18:10:23.382Z
Updated: 2024-09-16T16:53:59.807Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.