CVE-2017-5584: XSS

Published Mar 15, 2017

Updated

Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

52 affected components

Palo Alto Networks PAN-OS=5.1

Palo Alto Networks PAN-OS=6.0

Palo Alto Networks PAN-OS=6.0.1

Palo Alto Networks PAN-OS=6.0.2

Palo Alto Networks PAN-OS=6.0.3

Palo Alto Networks PAN-OS=6.0.4

Palo Alto Networks PAN-OS=6.0.5

Palo Alto Networks PAN-OS=6.0.6

Palo Alto Networks PAN-OS=6.0.7

Palo Alto Networks PAN-OS=6.0.8

Palo Alto Networks PAN-OS=6.0.9

Palo Alto Networks PAN-OS=6.0.10

Palo Alto Networks PAN-OS=6.0.11

Palo Alto Networks PAN-OS=6.0.12

Palo Alto Networks PAN-OS=6.1.0

Palo Alto Networks PAN-OS=6.1.1

Palo Alto Networks PAN-OS=6.1.2

Palo Alto Networks PAN-OS=6.1.3

Palo Alto Networks PAN-OS=6.1.4

Palo Alto Networks PAN-OS=6.1.5

Palo Alto Networks PAN-OS=6.1.6

Palo Alto Networks PAN-OS=6.1.7

Palo Alto Networks PAN-OS=6.1.8

Palo Alto Networks PAN-OS=6.1.9

Palo Alto Networks PAN-OS=6.1.10

Palo Alto Networks PAN-OS=6.1.11

Palo Alto Networks PAN-OS=6.1.12

Palo Alto Networks PAN-OS=6.1.13

Palo Alto Networks PAN-OS=6.1.14

Palo Alto Networks PAN-OS=6.1.15

Palo Alto Networks PAN-OS=7.0.1

Palo Alto Networks PAN-OS=7.0.2

Palo Alto Networks PAN-OS=7.0.3

Palo Alto Networks PAN-OS=7.0.4

Palo Alto Networks PAN-OS=7.0.5

Palo Alto Networks PAN-OS=7.0.5-h2

Palo Alto Networks PAN-OS=7.0.6

Palo Alto Networks PAN-OS=7.0.7

Palo Alto Networks PAN-OS=7.0.8

Palo Alto Networks PAN-OS=7.0.9

Palo Alto Networks PAN-OS=7.0.10

Palo Alto Networks PAN-OS=7.0.11

Palo Alto Networks PAN-OS=7.0.12

Palo Alto Networks PAN-OS=7.1.0

Palo Alto Networks PAN-OS=7.1.1

Palo Alto Networks PAN-OS=7.1.2

Palo Alto Networks PAN-OS=7.1.3

Palo Alto Networks PAN-OS=7.1.4

Palo Alto Networks PAN-OS=7.1.4-h2

Palo Alto Networks PAN-OS=7.1.5

Palo Alto Networks PAN-OS=7.1.6

Palo Alto Networks PAN-OS=7.1.7

Event History

Mar 15, 2017

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-5584?

CVE-2017-5584 is classified as a medium severity vulnerability due to its ability to allow remote authenticated users to execute arbitrary scripts.

How do I fix CVE-2017-5584?

To fix CVE-2017-5584, update your Palo Alto Networks PAN-OS to version 6.1.16 or later, or to version 7.0.13 or later.

What products are affected by CVE-2017-5584?

CVE-2017-5584 affects Palo Alto Networks PAN-OS versions 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8.

Is CVE-2017-5584 a remote code execution vulnerability?

No, CVE-2017-5584 is a cross-site scripting (XSS) vulnerability, not a remote code execution vulnerability.

Can an unauthenticated user exploit CVE-2017-5584?

No, CVE-2017-5584 requires that the attacker is a remote authenticated user to exploit the vulnerability.