CVE-2023-6789: PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface. Then, when viewed by a properly authenticated administrator, the JavaScript payload executes and disguises all associated actions as performed by that unsuspecting authenticated administrator.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6789?
CVE-2023-6789 is classified as a high severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2023-6789?
To fix CVE-2023-6789, upgrade your Palo Alto Networks PAN-OS to the latest patched version.
Who is affected by CVE-2023-6789?
CVE-2023-6789 affects authenticated administrators using vulnerable versions of Palo Alto Networks PAN-OS.
What versions of PAN-OS are vulnerable to CVE-2023-6789?
Versions 8.1.0 to 8.1.26, 9.0.0 to 9.0.17, 9.1.0 to 9.1.17, 10.1.0 to 10.1.11, 10.2.0 to 10.2.5, and 11.0.0 to 11.0.2 are affected by CVE-2023-6789.
What type of vulnerability is CVE-2023-6789?
CVE-2023-6789 is a cross-site scripting (XSS) vulnerability that allows execution of stored JavaScript payloads.