Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.5:-:*:*:content_engine:*:*:*

part: a version: 7.5 update: -

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductCortex Xdr Agent (bf5487ae-f1c5-54a5-9a95-d1817cc1c75c)
Edition*
Language*
Software editioncontent_engine
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:npm/%40paloaltonetworks/pan-cortex-xdr purl2cpe 2026-06-01 10:16:50.037206
pkg:sourceforge/cortex-xdr purl2cpe 2026-06-01 10:16:50.037207

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0026 vulnerable 2026-06-08 05:39:09.149796 Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability
MEDIUM (6.7)
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.
Published: 2022-05-11T16:30:25.746Z
Updated: 2024-09-17T01:26:10.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.