Palo Alto Networks PAN-OS before 8.1.4 GlobalProtect Portal Login page allows an unauthenticated attacker to inject arbitrary JavaScript or HTML, making it vulnerable to cross-site scripting.
id: CVE-2018-10141
info:
name: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Script
...