Medium severity · published Jun 12, 2025
CVE-2025-4233
Prisma Access Browser: Inappropriate implementation in Cache
5.1
CVSS
0.2%
EPSS
No
On KEV
Description
An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Prisma Access Browser · Palo Alto Networks
before 136.24.1.93 · source: vendor
Affected product
PA
Prisma Access Browser
Palo Alto Networks
More from Prisma Access Browser
9.3
CVE-2025-0129
Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser