Intrusion PreventionPAN-OS.Management.Interface.Change.Password.XSS
Description
This indicates an attack attempt to exploit a Cross-Site Scripting vulnerability in Palo Alto Networks Management Interface.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. An attacker can exploit this by tricking an unsuspecting user in to clicking a crafted link and execute arbitrary script code within the context of the target user's browser.
Affected Products
Palo Alto Networks PAN-OS 8.1 versions earlier than PAN-OS 8.1.16
Palo Alto Networks PAN-OS 9.0 versions earlier than PAN-OS 9.0.9
Impact
System Compromise: Remote attackers can execute arbitrary script code within the context of the target user's browser.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://securityadvisories.paloaltonetworks.com/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 55343 |
| Created | Mar 28, 2024 |
| Updated | Apr 10, 2024 |
| Risk |
|
| CVE ID | CVE-2020-2036 |
| Exploit Prediction Score | 3.23% |
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | Other |