CVE-2021-3043highCWE-79

CVE-2021-3043: falha de alta gravidade em Palo Alto Networks Prisma Cloud Compute

Prisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Prisma Cloud Compute

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.6%
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. No additional action is required for these instances. This issue impacts: Prisma Cloud Compute 20.12 versions earlier than Prisma Cloud Compute 20.12.552; Prisma Cloud Compute 21.04 versions earlier than Prisma Cloud Compute 21.04.439.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Palo Alto Networks · Prisma Cloud Compute
CVEs relacionadas — Palo Alto Networks Prisma Cloud Compute

No mesmo produto, das mais perigosas para as menos.

CVE-2021-3033CRITICALPrisma Cloud Compute: SAML Authentication Bypass Vulnerability in ConsoleEPSS 1.2%CVE-2021-3039LOWPrisma Cloud Compute: User role authorization secret for Console leaked through log file exportEPSS 0.5%CVE-2024-5906MEDIUMPrisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceEPSS 0.2%