CVE-2015-2223

Currently unrated

Key Information:

Vendor
Palo Alto Networks
Status
Traps
Vendor
CVE Published:
14 April 2015

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the (1) Arguments, (2) FileName, or (3) URL parameter in a SOAP request.

References

http://www.securityfocus.com/archive/1/535113/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/131182/Palo-Alto-Tra...
x_refsource_MISC
http://www.securityfocus.com/bid/73704
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.