VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 14, 2024· Updated Jun 17, 2026

CVE-2024-0010

CVE-2024-0010

Description

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Paloaltonetworks/Prisma Access Agentcpe-rescue
    Range: All
  • Paloaltonetworks/Cloud Ngfwcpe-rescue
    Range: All
  • Paloaltonetworks/Panosllm-fuzzy8 versions
    (expand)+ 7 more
    • (no CPE)
    • (no CPE)range: 9.0
    • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: >=10.1.0,<10.1.11
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:-:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:-:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h1:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h2:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.