漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface
Vulnerability Description
A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Palo Alto Network Cortex XSOAR 跨站脚本漏洞
Vulnerability Description
Palo Alto Networks Cortex Xsoar是美国Palo Alto Networks公司的一个安全编排自动化和响应 (Soar) 平台。 Palo Alto Network Cortex XSOAR 存在跨站脚本漏洞，该漏洞允许攻击者存储一个持久的javascript利用代码，导致在Cortex XSOAR web界面中执行任意操作。以下产品及版本受到影响:所有版本的Cortex XSOAR 6.1.0;Cortex XSOAR build 1958888之前的6.2.0builds。
CVSS Information
N/A
Vulnerability Type
N/A