What is CVE-2019-1565?

CVE-2019-1565 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2019-1565 Cross-Site Scripting (XSS) in PAN-OS External Dynamic Lists

Which CVE IDs does CVE-2019-1565 cover?

CVE-2019-1565 covers the following CVE IDs: CVE-2019-1565. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2019-1565?

CVE-2019-1565 affects 1 product, including: PAN-OS.

CVE-2019-1565Medium

CVE-2019-1565 Cross-Site Scripting (XSS) in PAN-OS External Dynamic Lists

Vendor

Palo Alto Networks Security Advisories

Published

January 23, 2019

Last Modified

January 23, 2019

🔗 CVE IDs covered (1)

CVE-2019-1565 →

📋 Description

A Cross-Site Scripting (XSS) vulnerability exists in the PAN-OS External Dynamic Lists. (Ref. # PAN-106776; CVE-2019-1565) Successful exploitation of this issue may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier.

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 7.1.22 and later, PAN-OS 8.0.15 and later, and PAN-OS 8.1.6 and later. Workarounds and mitigations: N/A

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2019-1565