VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Feb 10, 2022· Updated Jun 17, 2026

CVE-2022-0020

CVE-2022-0020

Description

A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Paloaltonetworks/Cortex XSOARllm-fuzzy2 versions
    6.1.0, 6.2.0 < build 1958888+ 1 more
    • (no CPE)range: 6.1.0, 6.2.0 < build 1958888
    • (no CPE)range: 6.1.0 all

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.