CVE-2016-9149
First published: Sat Nov 19 2016(Updated: )
The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 mishandles single quote characters, which allows remote authenticated users to conduct XPath injection attacks via a crafted string.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Palo Alto Networks PAN-OS | >=5.0.0<5.0.20 | |
| Palo Alto Networks PAN-OS | >=5.1.0<5.1.13 | |
| Palo Alto Networks PAN-OS | >=6.0.0<6.0.15 | |
| Palo Alto Networks PAN-OS | >=6.1.0<6.1.15 | |
| Palo Alto Networks PAN-OS | >=7.0.0<7.0.11 | |
| Palo Alto Networks PAN-OS | >=7.1.0<7.1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-9149?
CVE-2016-9149 is rated as high severity due to the potential for remote authenticated users to perform XPath injection attacks.
How do I fix CVE-2016-9149?
To fix CVE-2016-9149, upgrade to a patched version of Palo Alto Networks PAN-OS: 5.0.20, 5.1.13, 6.0.15, 6.1.15, 7.0.11, or 7.1.6 or later.
Who is affected by CVE-2016-9149?
CVE-2016-9149 affects multiple versions of Palo Alto Networks PAN-OS prior to specified fixed versions.
What types of attacks can CVE-2016-9149 enable?
CVE-2016-9149 enables remote authenticated users to conduct XPath injection attacks against the affected PAN-OS systems.
Is my version of PAN-OS vulnerable to CVE-2016-9149?
If you are using a version of Palo Alto Networks PAN-OS older than the specified patched versions, then your system is vulnerable to CVE-2016-9149.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/paloaltonetworks
- canonical/palo alto networks pan-os
- version/palo alto networks pan-os/5.0.0
- version/palo alto networks pan-os/5.1.0
- version/palo alto networks pan-os/6.0.0
- version/palo alto networks pan-os/6.1.0
- version/palo alto networks pan-os/7.0.0
- version/palo alto networks pan-os/7.1.0