106752

https://security.paloaltonetworks.com/CVE-2019-1565

The version of Palo Alto Networks PAN-OS running on the remote host is  7.1.x prior to 7.1.22 or 8.0.x prior to 8.0.15 or 8.1.x prior to 8.1.6. It is, therefore, affected by a cross-site scripting (XSS) vulnerability that exists in the PAN-OS external dynamic lists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session.
(CVE-2019-1565)

CVE-2019-1565

medium

Tenable Plugins

medium