CVE-2016-9149Medium

CVE-2016-9149 XPath Injection

Published
November 17, 2016
Last Modified
November 17, 2016

🔗 CVE IDs covered (1)

CVE-2016-9149 →

📋 Description

The Addresses Object parsing function does not properly escape single quotes. (Ref # PAN-55237/92073/CVE-2016-9149) This post-authentication vulnerability could allow XPath manipulation. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS 5.1.12 and earlier; PAN-OS 6.0.14 and earlier; PAN-OS 6.1.14 and earlier; PAN-OS 7.0.10 and earlier; PAN-OS 7.1.5 and earlier

🎯 Affected products1

  • PAN-OS

✅ Remediation

PAN-OS 5.0.20 and later; PAN-OS 5.1.13 and later; PAN-OS 6.0.15 and later; PAN-OS 6.1.15 and later; PAN-OS 7.0.11 and later; PAN-OS 7.1.6 and later Workarounds and mitigations: N/A

🔗 References (1)