CX
Product
Cortex XSOAR
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 8Low 0
Watch
Add Cortex XSOAR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3044 | 9.8 | Jun 22 | An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform… Affected: 6.1.0; 6.2.0 |
| CVE-2026-0234 | 9.1 | Apr 13 | Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration Affected: 1.5.0 before 1.5.52 |
| CVE-2021-3051 | 8.1 | Sep 8 | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific… Affected: 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +16 more |
| CVE-2026-0270 | 7.5 | Jun 10 | Cortex XSOAR: Path Traversal Vulnerability Affected: 8.10.0 before 8.13.0.11 |
| CVE-2023-3282 | 6.7 | Nov 8 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute… Affected: before 6.10.0 |
| CVE-2022-0031 | 6.7 | Nov 9 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell… Affected: 6.5.0; 6.5.0; 6.5.0; 6.6.0; 6.6.0; 6.6.0; +2 more |
| CVE-2023-0003 | 6.5 | Feb 8 | A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the… Affected: 6.10.0 before 6.10.0.185964; 6.6.0; 6.6.0; 6.6.0; 6.6.0; 6.8.0; +3 more |
| CVE-2022-0020 | 5.4 | Feb 10 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript… Affected: 6.1.0; 6.1.0; 6.1.0; 6.1.0; 6.1.0; 6.1.0; +7 more |
| CVE-2024-9470 | 5.3 | Oct 9 | Cortex XSOAR: Information Disclosure Vulnerability Affected: 6.12.0 before 6.12.0 (Build 1271551) |
| CVE-2021-3034 | 5.1 | Mar 10 | An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to… Affected: 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +8 more |
| CVE-2022-0027 | 4.3 | May 11 | An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains… Affected: 6.6.0 before 6.6.0.2585049; 6.1.0; 6.2.0; 6.5.0 |
| CVE-2021-3049 | 4.3 | Sep 8 | An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to… Affected: 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +5 more |
Showing 12