Skip to content
OpenAdvisories
Unscored CVE-2017-12416 EUVD-2017-3989GHSA-8pc7-vxgw-xqv6

Cross-site scripting (XSS) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6…

Published Sep 7, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper request parameter validation.

References