CVE-2015-2223 Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546 allow remote attackers to...
MediumCVSS 4.3
EPSS 4.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the (1) Arguments, (2) FileName, or (3) URL parameter in a SOAP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks traps | = 3.1.2.1546 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150329 CVE-2015-2223: Palo Alto Traps Server Stored XSS mailing-list
- 73704 vdb-entry
- security.paloaltonetworks.com