Beveiligingsadvies

CVE-2024-0010

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-14 17:32:28
Laatst bijgewerkt 2025-04-24 15:15:56
Toegewezen door palo_alto
CVSS-score 4.3
Status PUBLISHED

Beschrijving

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.