Vulnerabilities > Paloaltonetworks > Prisma Cloud > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-06-12 CVE-2024-5906 Cross-site Scripting vulnerability in Paloaltonetworks Prisma Cloud
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute.
network
low complexity
paloaltonetworks CWE-79
4.8
2021-07-15 CVE-2021-3043 Cross-site Scripting vulnerability in Paloaltonetworks Prisma Cloud 20.12
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface.
network
low complexity
paloaltonetworks CWE-79
4.8