Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.6.0:2889656:*:*:*:*:*:*

part: a version: 6.6.0 update: 2889656

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductCortex Xsoar (736a1cba-a5d6-5e76-b104-28eb27c69a47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:sourceforge/cortex-xsoar purl2cpe 2026-06-01 10:16:49.857035

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0003 vulnerable 2026-06-08 05:52:03.858825 Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
MEDIUM (6.5)
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
Published: 2023-02-08T17:22:07.660Z
Updated: 2025-02-13T16:38:40.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0031 vulnerable 2026-06-08 05:39:09.190974 Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
MEDIUM (6.7)
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.
Published: 2022-11-09T17:24:34.557Z
Updated: 2025-05-01T19:10:17.973Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.