106750

https://security.paloaltonetworks.com/CVE-2019-1566

https://www.purplemet.com/blog/palo-alto-firewall-multiple-xss-vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is  7.1.x prior to 7.1.22 or 8.0.x prior to 8.0.15 or 8.1.x prior to 8.1.6. It is, therefore, affected by multiple vulnerabilities :

  - A cross-site scripting (XSS) vulnerability exists in Management Web     Interface of PAN-OS due to improper validation of user-supplied     input before returning it to users. An unauthenticated, remote attacker     can exploit this, by convincing a user to click a specially crafted     URL, to execute arbitrary script code in a user's browser session.
    (CVE-2019-1566)

CVE-2019-1566

medium

Tenable Plugins

medium