Security Advisory

CVE-2024-0010

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-02-14 17:32:28

Last updated 2025-04-24 15:15:56

Assigner palo_alto

CVSS score 4.3

State PUBLISHED

Description

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.

← Browse all CVEs View on cve.org ↗