title: Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface
description: A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
vendor: Palo Alto Networks
product: Cortex XSOAR
versions:
version: 6.5.0 all, status: unaffected
version: 6.1.0 all, status: affected
version: 6.2.0, status: affected, lessThan: 1958888, versionType: custom, changes: [at: 1958888, status: unaffected]
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
]
exploits: Palo Alto Networks is not aware of any malicious exploitation of this issue.
solutions: This issue is fixed in Cortex XSOAR 6.2.0 build 1958888 and all later Cortex XSOAR versions.
workarounds: There are no known workarounds for this issue.