Skip to content
CVE Tracker
Back

CVE-2024-0010

PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal

Medium4.3EPSS 0.51%
Published
Updated
Reserved
Assigned by
palo_alto

Description

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.

Scores

CVSS scores of CVE-2024-0010, by who scored it
Scored byCVSSScoreVector
palo_altoCNA (assigner)3.1Medium4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
NVDNVD · Analyzed3.1Medium6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS (exploitation in 30 days)
0.51% · top 56% of all CVEs (3 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

Affected products

  • Palo Alto Networks · PAN-OS

    • affected 9.0 – < 9.0.17-h4
    • affected 9.1 – < 9.1.17
    • affected 10.1 – < 10.1.11-h1
    • affected 10.1 – < 10.1.12
    • unaffected 10.2 – < 11.0.1
    • unaffected 11.0 – < 10.1.10-h1
    • unaffected 11.1

  • Palo Alto Networks · Prisma Access

    • unaffected All

  • Palo Alto Networks · Cloud NGFW

    • unaffected All

What to do

Solution: This issue is fixed in PAN-OS 9.0.17-h4, PAN-OS 9.1.17, PAN-OS 10.1.11-h1, PAN-OS 10.1.12, and all later PAN-OS versions.

Workaround: Customers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat ID 94972 (Applications and Threats content update 8810).

Exploitation: Palo Alto Networks is not aware of any malicious exploitation of this issue.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .