Cortex Xsoar vulnerabilitiesRanked by how likely they are to be used.
Cortex Xsoar is made by Palo Alto Networks. We track 9 published vulnerabilities listed under that exact name, across 11 versions. None of them is on the list of flaws known to be exploited today. Palo Alto Networks lists newer releases under their own names, such as Cortex Xsoar Commonscripts, so check those pages too.
We keep watching the known-exploited list.
Is Cortex Xsoar listed under other names? Yes.
Palo Alto Networks also lists Cortex Xsoar under more specific names, such as Cortex Xsoar Commonscripts. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which Cortex Xsoar vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Cortex Xsoar's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Cortex Xsoar flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 1.7%CVE-2022-0020Medium
A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary...
- 1.4%CVE-2021-3044Critical
An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform unauthorized actions through the REST API.
- 1.3%CVE-2023-0003Medium
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
- 0.6%CVE-2021-3051High
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance...
- 0.5%CVE-2022-0027Medium
An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents...
- 0.5%CVE-2021-3049Medium
An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations...
- 0.2%CVE-2023-3282Medium
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the...
- 0.2%CVE-2021-3034Medium
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs...
- 0.1%CVE-2022-0031Medium
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs...
Running Cortex Xsoar? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.
- Matched to
- Cortex Xsoar on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 9 published vulnerabilities listed under the name Cortex Xsoar, across 11 versions.
None of Cortex Xsoar's vulnerabilities is on the list of flaws known to be exploited today.
Palo Alto Networks also lists Cortex Xsoar under more specific names, such as Cortex Xsoar Commonscripts. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Cortex Xsoar. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.