Description
The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML.
References
- 1041240 vdb-entry
- 104657 vdb-entry
- https://security.paloaltonetworks.com/CVE-2018-9337