CVE-2016-9149
First published: Sat Nov 19 2016(Updated: )
The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 mishandles single quote characters, which allows remote authenticated users to conduct XPath injection attacks via a crafted string.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Paloaltonetworks Pan-os | >=5.0.0<5.0.20 | |
| Paloaltonetworks Pan-os | >=5.1.0<5.1.13 | |
| Paloaltonetworks Pan-os | >=6.0.0<6.0.15 | |
| Paloaltonetworks Pan-os | >=6.1.0<6.1.15 | |
| Paloaltonetworks Pan-os | >=7.0.0<7.0.11 | |
| Paloaltonetworks Pan-os | >=7.1.0<7.1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/paloaltonetworks
- canonical/paloaltonetworks pan-os
- version/paloaltonetworks pan-os/5.0.0
- version/paloaltonetworks pan-os/5.1.0
- version/paloaltonetworks pan-os/6.0.0
- version/paloaltonetworks pan-os/6.1.0
- version/paloaltonetworks pan-os/7.0.0
- version/paloaltonetworks pan-os/7.1.0