CVE-2021-3043highCWE-79

CVE-2021-3043: fallo de gravedad alta en Palo Alto Networks Prisma Cloud Compute

Prisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Prisma Cloud Compute

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 0.6%
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. No additional action is required for these instances. This issue impacts: Prisma Cloud Compute 20.12 versions earlier than Prisma Cloud Compute 20.12.552; Prisma Cloud Compute 21.04 versions earlier than Prisma Cloud Compute 21.04.439.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Palo Alto Networks · Prisma Cloud Compute
CVEs relacionadas — Palo Alto Networks Prisma Cloud Compute

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-3033CRITICALPrisma Cloud Compute: SAML Authentication Bypass Vulnerability in ConsoleEPSS 1.2%CVE-2021-3039LOWPrisma Cloud Compute: User role authorization secret for Console leaked through log file exportEPSS 0.5%CVE-2024-5906MEDIUMPrisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceEPSS 0.2%