CVE-2024-0010: PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0010?
CVE-2024-0010 is considered a high-severity reflected cross-site scripting vulnerability.
How do I fix CVE-2024-0010?
To fix CVE-2024-0010, users should upgrade to the latest version of Palo Alto Networks PAN-OS that addresses this vulnerability.
Which versions of PAN-OS are affected by CVE-2024-0010?
CVE-2024-0010 affects PAN-OS versions from 9.0.0 to 10.1.11.
What impact does CVE-2024-0010 have on users?
CVE-2024-0010 allows execution of malicious JavaScript, enabling phishing attacks and potentially compromising user data.
How can I protect my environment from CVE-2024-0010?
To protect your environment from CVE-2024-0010, ensure fostering safe browsing habits and applying security patches promptly.