CVE-2017-9459

Published: Aug 2, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (31)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	Up to 6.1.17
Paloaltonetworks Pan Os	Version 7.0.10
Paloaltonetworks Pan Os	Version 7.0.11
Paloaltonetworks Pan Os	Version 7.0.12
Paloaltonetworks Pan Os	Version 7.0.13
Paloaltonetworks Pan Os	Version 7.0.14
Paloaltonetworks Pan Os	Version 7.0.15
Paloaltonetworks Pan Os	Version 7.0.1
Paloaltonetworks Pan Os	Version 7.0.2
Paloaltonetworks Pan Os	Version 7.0.3
Paloaltonetworks Pan Os	Version 7.0.4
Paloaltonetworks Pan Os	Version 7.0.5
Paloaltonetworks Pan Os	Version 7.0.6
Paloaltonetworks Pan Os	Version 7.0.7
Paloaltonetworks Pan Os	Version 7.0.8
Paloaltonetworks Pan Os	Version 7.0.9
Paloaltonetworks Pan Os	Version 7.1.0
Paloaltonetworks Pan Os	Version 7.1.10
Paloaltonetworks Pan Os	Version 7.1.1
Paloaltonetworks Pan Os	Version 7.1.2
Paloaltonetworks Pan Os	Version 7.1.3
Paloaltonetworks Pan Os	Version 7.1.4-h2
Paloaltonetworks Pan Os	Version 7.1.4
Paloaltonetworks Pan Os	Version 7.1.6
Paloaltonetworks Pan Os	Version 7.1.7
Paloaltonetworks Pan Os	Version 7.1.8
Paloaltonetworks Pan Os	Version 7.1.9-h2
Paloaltonetworks Pan Os	Version 7.1.9
Paloaltonetworks Pan Os	Version 8.0.0
Paloaltonetworks Pan Os	Version 8.0.1
Paloaltonetworks Pan Os	Version 8.0.2