CVE-2013-5664
Description
Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.
Risk Information
Base Score
4.7
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS Score
Exploitation Probability
0.638
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities affected in pan-os 4.0.7 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.4 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.3 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.0 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.1 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.2 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.8 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.3 | NCM |
| Multiple Vulnerabilities affected in pan-os 5.0.0-h1 | NCM |
| Multiple Vulnerabilities affected in pan-os 5.0.0 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.10 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.9 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.8-h3 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.8 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.7 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.6 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.5 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.4 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.6 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.5 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.2 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.1 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.0.0 | NCM |
| Multiple Vulnerabilities affected in pan-os 5.0.5 | NCM |
| Multiple Vulnerabilities affected in pan-os 5.0.4 | NCM |
| Multiple Vulnerabilities affected in pan-os 5.0.3 | NCM |
| Multiple Vulnerabilities affected in pan-os 5.0.2 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.12 | NCM |
| Multiple Vulnerabilities affected in pan-os 4.1.11 | NCM |
| Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability (CVE-2013-5664) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234