Login Request a demo
CX
Product
Cortex XSOAR
by Palo Alto Networks · last CVE Jun 10, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 2High 2Medium 8Low 0
Severity
All severities12Critical2High2Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cortex XSOAR to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-3282
6.7
0%
Nov 8
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
Affected: before 6.10.0
CVE-2022-0031
6.7
0%
Nov 9
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell…
Affected: 6.5.0; 6.5.0; 6.5.0; 6.6.0; 6.6.0; 6.6.0; +2 more
CVE-2023-0003
6.5
1%
Feb 8
Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
Affected: 6.10.0 before 6.10.0.185964; 6.6.0; 6.6.0; 6.6.0; 6.6.0; 6.8.0; +3 more
CVE-2022-0020
5.4
2%
Feb 10
A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript…
Affected: 6.1.0; 6.1.0; 6.1.0; 6.1.0; 6.1.0; 6.1.0; +7 more
CVE-2024-9470
5.3
0%
Oct 9
Cortex XSOAR: Information Disclosure Vulnerability
Affected: 6.12.0 before 6.12.0 (Build 1271551)
CVE-2021-3034
5.1
0%
Mar 10
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to…
Affected: 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +8 more
CVE-2022-0027
4.3
1%
May 11
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains…
Affected: 6.6.0 before 6.6.0.2585049; 6.1.0; 6.2.0; 6.5.0
CVE-2021-3049
4.3
0%
Sep 8
An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to…
Affected: 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +5 more
Showing 8