7.3.1

DATE	CVE	VULNERABILITY TITLE	RISK
2022-01-12	CVE-2022-0012	Link Following vulnerability in Paloaltonetworks Cortex XDR Agent An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. local low complexity paloaltonetworks CWE-59	3.6
2022-01-12	CVE-2022-0013	Information Exposure vulnerability in Paloaltonetworks Cortex XDR Agent A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. local low complexity paloaltonetworks CWE-200	2.1
2022-01-12	CVE-2022-0014	Untrusted Search Path vulnerability in Paloaltonetworks Cortex XDR Agent An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can then be unintentionally executed by another local user when that user utilizes a Live Terminal session. local paloaltonetworks CWE-426	6.9