CVE-2023-6790

Summary

CVE-2023-6790 is a DOM-Based cross-site scripting (XSS) vulnerability affecting Palo Alto Networks PAN-OS software. This issue allows a remote attacker to inject and execute malicious JavaScript code in an administrator's browser by designing a crafted link to the PAN-OS web interface. Successful exploitation can lead to unauthorized access, data theft, or further compromise of the affected system. Administrators are strongly advised to apply the available patch as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.