Cortex XDR Agent vulnerabilitiesRanked by how likely they are to be used.
Cortex XDR Agent is made by Palo Alto Networks. We track 19 published vulnerabilities in it, across 59 versions. None of them is on the list of flaws known to be exploited today. If you run Cortex XDR Agent, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Cortex XDR Agent vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Cortex XDR Agent's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Cortex XDR Agent flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 0.4%CVE-2024-5909Medium
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent.
- 0.3%CVE-2020-2049High
A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privileges.
- 0.3%CVE-2023-3280Medium
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.
- 0.3%CVE-2020-2020Medium
An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR...
- 0.3%CVE-2023-0002High
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.
- 0.3%CVE-2022-0014High
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that...
- 0.2%CVE-2021-3042High
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges.
- 0.2%CVE-2021-3041High
A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges.
- 0.2%CVE-2022-0025Medium
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory...
- 0.2%CVE-2022-0012High
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system...
Running Cortex XDR Agent? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
- Matched to
- Cortex XDR Agent on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 19 published vulnerabilities listed under the name Cortex XDR Agent, across 59 versions.
None of Cortex XDR Agent's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Cortex XDR Agent. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.