2 lines
5.3 KiB
JSON
2 lines
5.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"9.0.17-h4","status":"unaffected"}],"lessThan":"9.0.17-h4","status":"affected","version":"9.0","versionType":"custom"},{"changes":[{"at":"9.1.17","status":"unaffected"}],"lessThan":"9.1.17","status":"affected","version":"9.1","versionType":"custom"},{"changes":[{"at":"10.1.11-h1","status":"unaffected"}],"lessThan":"10.1.11-h1","status":"affected","version":"10.1","versionType":"custom"},{"changes":[{"at":"10.1.12","status":"unaffected"}],"lessThan":"10.1.12","status":"affected","version":"10.1","versionType":"custom"},{"changes":[{"at":"11.0.1","status":"unaffected"}],"lessThan":"11.0.1","status":"unaffected","version":"10.2","versionType":"custom"},{"changes":[{"at":"10.1.10-h1","status":"unaffected"}],"lessThan":"10.1.10-h1","status":"unaffected","version":"11.0","versionType":"custom"},{"status":"unaffected","version":"11.1"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All"}]},{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All"}]}],"source":"psirt@paloaltonetworks.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"77695C8C-9732-4605-A160-A5159BD8B49C","versionEndExcluding":"10.1.11","versionStartIncluding":"10.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:-:*:*:*:*:*:*","matchCriteriaId":"F6242E26-AF44-4A19-ADD3-CBB798A862D1","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"9F9FFBA6-7008-422B-9CF1-E37CA62081EB","versionEndExcluding":"9.1.17","versionStartIncluding":"9.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"89A55C5F-8E01-42C4-BE93-D683900C07BE","versionEndExcluding":"9.0.17","versionStartIncluding":"9.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:-:*:*:*:*:*:*","matchCriteriaId":"CDAE9753-EF8D-4B15-A73C-0EF56FE6C78C","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h1:*:*:*:*:*:*","matchCriteriaId":"2A142EE1-E516-4582-9A7E-6E4C74FB3991","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h2:*:*:*:*:*:*","matchCriteriaId":"5921D6F7-4C59-4DF1-B5DD-5CCA660B2EAF","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h3:*:*:*:*:*:*","matchCriteriaId":"ACF6B9D6-0C48-48FD-8B5A-D0612B660212","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en la función del portal GlobalProtect del software PAN-OS de Palo Alto Networks permite la ejecución de JavaScript malicioso (en el contexto del navegador de un usuario) si un usuario hace clic en un enlace malicioso, lo que permite ataques de phishing que podría provocar el robo de credenciales."}],"id":"CVE-2024-0010","lastModified":"2026-06-17T06:52:35.727","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-02-15T16:39:09.757949Z","version":"2.0.3"}}]},"published":"2024-02-14T18:15:47.703","references":[{"source":"psirt@paloaltonetworks.com","tags":["Vendor Advisory"],"url":"https://security.paloaltonetworks.com/CVE-2024-0010"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://security.paloaltonetworks.com/CVE-2024-0010"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}
|