Vulnerability Details CVE-2024-5919
A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.1%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-5919
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.0
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.1
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.2
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.3
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.5
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.6
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.7
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.8
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.9
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.0
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.1
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.2
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.0
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.1