Medium severity · published May 11, 2022
CVE-2022-0027
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains…
4.3
CVSS
0.5%
EPSS
No
On KEV
Description
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CX
Cortex Xsoar · Paloaltonetworks
6.6.0 before 6.6.0.2585049; 6.1.0; 6.2.0; 6.5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-0027
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-0027
Vendor Advisory
https://security.paloaltonetworks.com/CVE-2022-0027
More from Cortex Xsoar
9.8
CVE-2021-3044
An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform…
9.1
CVE-2026-0234
Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
8.1
CVE-2021-3051
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific…
7.5
CVE-2026-0270
Cortex XSOAR: Path Traversal Vulnerability
6.7
CVE-2023-3282
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine