CVE-2022-0020 - Vulnerability Details

Vendors	Products
Paloaltonetworks	Cortex Xsoar

Link	Providers
http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html
https://security.paloaltonetworks.com/CVE-2022-0020

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-0020", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "assignerShortName": "palo_alto", "dateUpdated": "2024-09-16T16:53:59.807Z", "dateReserved": "2021-12-28T00:00:00", "datePublished": "2022-02-10T18:10:23.382535Z"}, "containers": {"cna": {"title": "Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface", "datePublic": "2022-02-09T00:00:00", "providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2023-04-10T00:00:00"}, "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888."}], "affected": [{"vendor": "Palo Alto Networks", "product": "Cortex XSOAR", "versions": [{"version": "6.5.0 all", "status": "unaffected"}, {"version": "6.1.0 all", "status": "affected"}, {"version": "6.2.0", "status": "affected", "lessThan": "1958888", "versionType": "custom", "changes": [{"at": "1958888", "status": "unaffected"}]}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2022-0020"}, {"url": "http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html"}], "credits": [{"lang": "en", "value": "Palo Alto Networks thanks \u00d6m\u00fcr U\u011fur of T\u00fcrk Telekom for discovering and reporting this issue."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-79 Cross-site Scripting (XSS)", "cweId": "CWE-79"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"defect": ["PDV-2194"], "discovery": "EXTERNAL"}, "workarounds": [{"lang": "en", "value": "There are no known workarounds for this issue."}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."}], "timeline": [{"lang": "en", "time": "2022-02-09T00:00:00", "value": "Initial publication"}], "solutions": [{"lang": "en", "value": "This issue is fixed in Cortex XSOAR 6.2.0 build 1958888 and all later Cortex XSOAR versions."}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:18:41.523Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.paloaltonetworks.com/CVE-2022-0020", "tags": ["x_transferred"]}, {"url": "http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-0020 (string)

assignerOrgId : d6c1279f-00f6-4ef7-9217-f89ffe703ec0 (string)

assignerShortName : palo_alto (string)

dateUpdated : 2024-09-16T16:53:59.807Z (string)

dateReserved : 2021-12-28T00:00:00 (string)

datePublished : 2022-02-10T18:10:23.382535Z (string)

}

containers : { »

cna : { »

title : Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface (string)

datePublic : 2022-02-09T00:00:00 (string)

providerMetadata : { »

orgId : d6c1279f-00f6-4ef7-9217-f89ffe703ec0 (string)

shortName : palo_alto (string)

dateUpdated : 2023-04-10T00:00:00 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888. (string)

}

]

affected : [ »

0 : { »

vendor : Palo Alto Networks (string)

product : Cortex XSOAR (string)

versions : [ »

0 : { »

version : 6.5.0 all (string)

status : unaffected (string)

}

1 : { »

version : 6.1.0 all (string)

status : affected (string)

}

2 : { »

version : 6.2.0 (string)

status : affected (string)

lessThan : 1958888 (string)

versionType : custom (string)

changes : [ »

0 : { »

at : 1958888 (string)

status : unaffected (string)

}

]

}

]

}

]

references : [ »

0 : { »

url : https://security.paloaltonetworks.com/CVE-2022-0020 (string)

}

1 : { »

url : http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html (string)

}

]

credits : [ »

0 : { »

lang : en (string)

value : Palo Alto Networks thanks Ömür Uğur of Türk Telekom for discovering and reporting this issue. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : HIGH (string)

userInteraction : REQUIRED (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

baseScore : 6.8 (number)

baseSeverity : MEDIUM (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-79 Cross-site Scripting (XSS) (string)

cweId : CWE-79 (string)

}

]

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

source : { »

defect : [ »

0 : PDV-2194 (string)

]

discovery : EXTERNAL (string)

}

workarounds : [ »

0 : { »

lang : en (string)

value : There are no known workarounds for this issue. (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : Palo Alto Networks is not aware of any malicious exploitation of this issue. (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2022-02-09T00:00:00 (string)

value : Initial publication (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : This issue is fixed in Cortex XSOAR 6.2.0 build 1958888 and all later Cortex XSOAR versions. (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T23:18:41.523Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.paloaltonetworks.com/CVE-2022-0020 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:-:*:*:*:*:*:*", "matchCriteriaId": "FA3AD87F-BF18-48A2-8344-197185D974B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1016923:*:*:*:*:*:*", "matchCriteriaId": "F3462449-36BD-4FB6-BB40-B06F0EDE570A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1031903:*:*:*:*:*:*", "matchCriteriaId": "5ED03A42-9D5F-4347-BA8D-DA1B5D5C771A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1077664:*:*:*:*:*:*", "matchCriteriaId": "41C31238-7B7A-4057-867B-B3A35690A77A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1209934:*:*:*:*:*:*", "matchCriteriaId": "AA263B4A-4954-4A7F-B202-D31636B210E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1271079:*:*:*:*:*:*", "matchCriteriaId": "6E56CB67-2C93-4AD4-87B4-31B337D99B5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:848144:*:*:*:*:*:*", "matchCriteriaId": "6CE8BB23-1EEA-41EF-BEC5-EAC5DE7F095F", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:-:*:*:*:*:*:*", "matchCriteriaId": "9E7FE2E0-AA0B-4D86-B5B3-4E1417691CC5", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1271082:*:*:*:*:*:*", "matchCriteriaId": "41AE1B48-EB15-4249-97B0-FF8BDF6A783A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1321594:*:*:*:*:*:*", "matchCriteriaId": "AAC380C5-0CD4-4FEF-BF40-A06BFF5BA084", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1473927:*:*:*:*:*:*", "matchCriteriaId": "AC26F0D1-53C8-40A5-AE07-7064D45E08DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1578666:*:*:*:*:*:*", "matchCriteriaId": "F77199FC-169A-4752-A45A-73C664A98457", "vulnerable": true}, {"criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1822745:*:*:*:*:*:*", "matchCriteriaId": "1A82DA38-977E-4B75-BF76-825254B1CD2C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888."}, {"lang": "es", "value": "Una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en la interfaz web de Palo Alto Network Cortex XSOAR permite a un atacante autenticado basado en la red almacenar una carga \u00fatil de javascript persistente que llevar\u00e1 a cabo acciones arbitrarias en la interfaz web de Cortex XSOAR en nombre de los administradores autenticados que encuentren la carga \u00fatil durante las operaciones normales. Este problema afecta: Todas las versiones de Cortex XSOAR 6.1.0; versiones de Cortex XSOAR 6.2.0 anteriores a la versi\u00f3n 1958888"}], "id": "CVE-2022-0020", "lastModified": "2024-11-21T06:37:50.003", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "psirt@paloaltonetworks.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-02-10T18:15:08.747", "references": [{"source": "psirt@paloaltonetworks.com", "url": "http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html"}, {"source": "psirt@paloaltonetworks.com", "tags": ["Vendor Advisory"], "url": "https://security.paloaltonetworks.com/CVE-2022-0020"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.paloaltonetworks.com/CVE-2022-0020"}], "sourceIdentifier": "psirt@paloaltonetworks.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@paloaltonetworks.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:-:*:*:*:*:*:* (string)

matchCriteriaId : FA3AD87F-BF18-48A2-8344-197185D974B0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1016923:*:*:*:*:*:* (string)

matchCriteriaId : F3462449-36BD-4FB6-BB40-B06F0EDE570A (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1031903:*:*:*:*:*:* (string)

matchCriteriaId : 5ED03A42-9D5F-4347-BA8D-DA1B5D5C771A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1077664:*:*:*:*:*:* (string)

matchCriteriaId : 41C31238-7B7A-4057-867B-B3A35690A77A (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1209934:*:*:*:*:*:* (string)

matchCriteriaId : AA263B4A-4954-4A7F-B202-D31636B210E0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1271079:*:*:*:*:*:* (string)

matchCriteriaId : 6E56CB67-2C93-4AD4-87B4-31B337D99B5F (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:848144:*:*:*:*:*:* (string)

matchCriteriaId : 6CE8BB23-1EEA-41EF-BEC5-EAC5DE7F095F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 9E7FE2E0-AA0B-4D86-B5B3-4E1417691CC5 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1271082:*:*:*:*:*:* (string)

matchCriteriaId : 41AE1B48-EB15-4249-97B0-FF8BDF6A783A (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1321594:*:*:*:*:*:* (string)

matchCriteriaId : AAC380C5-0CD4-4FEF-BF40-A06BFF5BA084 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1473927:*:*:*:*:*:* (string)

matchCriteriaId : AC26F0D1-53C8-40A5-AE07-7064D45E08DD (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1578666:*:*:*:*:*:* (string)

matchCriteriaId : F77199FC-169A-4752-A45A-73C664A98457 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1822745:*:*:*:*:*:* (string)

matchCriteriaId : 1A82DA38-977E-4B75-BF76-825254B1CD2C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en la interfaz web de Palo Alto Network Cortex XSOAR permite a un atacante autenticado basado en la red almacenar una carga útil de javascript persistente que llevará a cabo acciones arbitrarias en la interfaz web de Cortex XSOAR en nombre de los administradores autenticados que encuentren la carga útil durante las operaciones normales. Este problema afecta: Todas las versiones de Cortex XSOAR 6.1.0; versiones de Cortex XSOAR 6.2.0 anteriores a la versión 1958888 (string)

}

]

id : CVE-2022-0020 (string)

lastModified : 2024-11-21T06:37:50.003 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : LOW (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 3.5 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:S/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 6.8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.9 (number)

impactScore : 5.9 (number)

source : psirt@paloaltonetworks.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 2.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-02-10T18:15:08.747 (string)

references : [ »

0 : { »

source : psirt@paloaltonetworks.com (string)

url : http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html (string)

}

1 : { »

source : psirt@paloaltonetworks.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.paloaltonetworks.com/CVE-2022-0020 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.paloaltonetworks.com/CVE-2022-0020 (string)

}

]

sourceIdentifier : psirt@paloaltonetworks.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : psirt@paloaltonetworks.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object