Known vulnerabilities in Cortex XSOAR 6.1.0 build 1016923
Vendor:
Palo Alto Networks, Inc.
Software:
Cortex XSOAR
Version:
6.1.0 build 1016923
Software CPE:
cpe:2.3:a:palo_alto_networks:cortex_xsoar:*:*:*:*:*:*:*:*
Website:
https://www.paloaltonetworks.com/
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
8
6
8.13.0
8.12.0
8.11.0
8.13.1
8.10.0
1.5.52
1.5.51
1.5.0
-
6.12.0 1271551
6.12.0 493375
6.11.0 443478
6.10 255865
6.9 177754
6.10. 250144
6.6 build 186115
6.8 build 185719
6.9 build 185415
6.10.0 build 185964
6.9.0 build 130766
6.9.0 build 3387847
6.8.0 build 3261002
6.6.0 build 3124193
6.6.0 build 3049220
6.6.0 build 2889656
6.6.0 build 2585049
6.5.0 build 2583817
6.5.0 build 2410815
6.5.0 build 2102531
6.2.0 build 2392875
6.2.0 build 1958888
6.2.0 build 1822745
6.2.0 build 1473927
6.2.0 build 1321594
6.2.0 build 1271082
5.5.0 1578677
6.0.2 1576452
6.1.0 1578663
6.2.0 build 1578666
7.1.3.20270
6.1.0 build 1271079
6.1.0 build 1271064
6.2.0 build 1271065
6.2.0
6.1.0 build 271064
6.1.0 build 1016923
6.1.0 build 1209934
6.1.0 build 1077664
6.1.0 build 1031903
6.1
6.0.2 build 98623
6.0.1 build 830029
5.5 build 98622
6.1.0 build 848144
6.0.2 build 97682
6.0.2 build 94597
6.0.2 build 93351
6.0.2 build 90947
6.0.1 build 87052
6.0.1 build 84583
6.0.1 build 81077
5.5 build 94592
5.5 build 78518
5.5 build 75211
5.5 build 73387
5.5 build 70066
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU98347 - Improper Access Control CVE-2024-9470 |
CWE-284 | Low | 6.12.0 1271551 | 10.10.2024 |
SB2024101020 |
||
| #VU63076 - Improper Access Control CVE-2022-0027 |
CWE-284 | Medium | 6.6.0 2585049 | 11.05.2022 |
SB2022051128 |
||
| #VU60482 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-0020 |
CWE-79 | Low | 6.2.0 1958888 | 09.02.2022 |
SB2022020927 |
||
| #VU56411 - Improper Verification of Cryptographic Signature CVE-2021-3051 |
CWE-347 | High | 5.5.0 1578677, 6.0.2 1576452, 6.1.0 1578663, 6.2.0 1578666 | 08.09.2021 |
SB2021090823 |
||
| #VU56410 - Improper Access Control CVE-2021-3049 |
CWE-284 | Low | 6.1.0 1209934 | 08.09.2021 |
SB2021090822 |
||
| #VU54313 - Improper Authorization CVE-2021-3044 |
CWE-285 | High | 6.1.0 271064, 6.2.0 1271065 | 22.06.2021 |
SB2021062225 |