CVE-2017-12416

Published: Sep 7, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper request parameter validation.

Affected (29)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	Up to 6.1.17
Paloaltonetworks Pan Os	Version 7.0.0
Paloaltonetworks Pan Os	Version 7.0.10
Paloaltonetworks Pan Os	Version 7.0.11
Paloaltonetworks Pan Os	Version 7.0.12
Paloaltonetworks Pan Os	Version 7.0.1
Paloaltonetworks Pan Os	Version 7.0.2
Paloaltonetworks Pan Os	Version 7.0.3
Paloaltonetworks Pan Os	Version 7.0.4
Paloaltonetworks Pan Os	Version 7.0.5
Paloaltonetworks Pan Os	Version 7.0.6
Paloaltonetworks Pan Os	Version 7.0.7
Paloaltonetworks Pan Os	Version 7.0.8
Paloaltonetworks Pan Os	Version 7.0.9
Paloaltonetworks Pan Os	Version 7.1.0
Paloaltonetworks Pan Os	Version 7.1.10
Paloaltonetworks Pan Os	Version 7.1.11
Paloaltonetworks Pan Os	Version 7.1.1
Paloaltonetworks Pan Os	Version 7.1.2
Paloaltonetworks Pan Os	Version 7.1.3
Paloaltonetworks Pan Os	Version 7.1.4
Paloaltonetworks Pan Os	Version 7.1.5
Paloaltonetworks Pan Os	Version 7.1.6
Paloaltonetworks Pan Os	Version 7.1.7
Paloaltonetworks Pan Os	Version 7.1.8
Paloaltonetworks Pan Os	Version 7.1.9
Paloaltonetworks Pan Os	Version 8.0.0
Paloaltonetworks Pan Os	Version 8.0.1
Paloaltonetworks Pan Os	Version 8.0.2