Low severity · published Sep 12, 2025
CVE-2025-4234
Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
2.4
CVSS
0.1%
EPSS
No
On KEV
Description
A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CX
Cortex XDR Microsoft 365 Defender Pack · Palo Alto Networks
4.6.0 before 11.0.2-133 · source: vendor
Affected product
CX
Cortex XDR Microsoft 365 Defender Pack
Palo Alto Networks