VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 9, 2020· Updated Jun 17, 2026

CVE-2020-2036

CVE-2020-2036

Description

A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute arbitrary JavaScript code in the administrator's browser and perform administrative actions. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Paloaltonetworks/Pan OS3 versions
    cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: >=8.1.0,<8.1.16
    • (no CPE)range: <8.1.16, <9.0.9
    • (no CPE)range: 9.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.