vulnerability
Palo Alto Networks PAN-SA-2016-0033: Cross-Site Scripting in Captive Portal
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:N/C:P/I:P/A:N) | Oct 31, 2016 | Oct 31, 2016 | Feb 18, 2025 |
Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Oct 31, 2016
Added
Oct 31, 2016
Modified
Feb 18, 2025
Description
Palo Alto Networks firewalls can be configured to identify users through a captive portal. This process is vulnerable to a cross-site scripting attack. (Ref # PAN-56221/93759).
Solutions
palo-alto-networks-pan-os-upgrade-5-0palo-alto-networks-pan-os-upgrade-5-1palo-alto-networks-pan-os-upgrade-6-0palo-alto-networks-pan-os-upgrade-6-1palo-alto-networks-pan-os-upgrade-7-0palo-alto-networks-pan-os-upgrade-7-1
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.