CVE-2018-9337: XSS
The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9337?
CVE-2018-9337 is considered a high severity vulnerability due to the potential for arbitrary JavaScript or HTML injection.
How do I fix CVE-2018-9337?
To fix CVE-2018-9337, upgrade your PAN-OS to a version later than 6.1.20, 7.1.17, 8.0.10, or 8.1.1.
What versions of PAN-OS are affected by CVE-2018-9337?
PAN-OS versions 6.1.20 and earlier, 7.1.17 and earlier, 8.0.10 and earlier, and 8.1.1 and earlier are affected by CVE-2018-9337.
What types of attacks can be executed using CVE-2018-9337?
CVE-2018-9337 allows attackers to inject arbitrary JavaScript or HTML, potentially leading to cross-site scripting (XSS) attacks.
Is CVE-2018-9337 remotely exploitable?
Yes, CVE-2018-9337 can be exploited remotely through the vulnerable web interface of PAN-OS.