Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-4460 State: PUBLISHED Published: 2025-10-01T11:45:19.050Z Last Updated: 2025-10-01T11:45:19.050Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up doing a shift operation where the number of bits shifted equals number of bits in the operand. This behaviour is undefined. Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the count is >= number of bits in the operand. Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472 References: - https://git.kernel.org/stable/c/0c0356ef2498c1a250fe
https://gitlab.freedesktop.org/drm/amd/-/issues/1472 References: - https://git.kernel.org/stable/c/0c0356ef2498c1a250fe3846f30293f828737309 - https://git.kernel.org/stable/c/1874b0ef1426b873de94c61861e38f29a8df714c - https://git.kernel.org/stable/c/3fdc5182700910a685d23df57d65166e8556a266 - https://git.kernel.org/stable/c/9069b1b542de8f3bbffef868aff41521b21485cf - https://git.kernel.org/stable/c/50e2fc36e72d4ad672032ebf646cecb48656efe0
CVE ID: CVE-2021-4461 State: PUBLISHED Published: 2025-10-30T21:16:23.161Z Last Updated: 2025-10-31T18:35:21.327Z Vendors: Seeyon Products: Zhiyuan OA Web Application System Problem Types: CWE-306 Description: Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the `enc` parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a session to arbitrary user IDs. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-30 at 00:30:40.855917 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment:
being exploited in the wild as of 2025-10-30 at 00:30:40.855917 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mp.weixin.qq.com/s/0AqdfTrZUVrwTMbKEKresg - https://github.com/chaitin/xray/blob/f90cf321bc4d294bbf6625a9c4853f3bfdf0a384/pocs/seeyon-oa-cookie-leak.yml - https://github.com/projectdiscovery/nuclei-templates/blob/1ca6b8e6fe225cbd46dcb893dcaee01447afa8c0/http/misconfiguration/seeyon-unauth.yaml#L20 - https://www.vulncheck.com/advisories/seeyon-zhiyuan-oa-web-application-system-authentication-bypass
CVE ID: CVE-2021-4462 State: PUBLISHED Published: 2025-11-10T22:32:33.955Z Last Updated: 2025-11-21T14:35:46.468Z Vendors: Employee Records System Products: Employee Records System Problem Types: CWE-434 Description: Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/11393
025-02-06 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/11393/employee-records-system.html - https://www.exploit-db.com/exploits/49596 - https://www.vulncheck.com/advisories/employees-records-system-arbitrary-file-upload-rce
CVE ID: CVE-2021-4463 State: PUBLISHED Published: 2025-11-12T22:07:30.512Z Last Updated: 2025-11-13T17:05:15.434Z Vendors: Shenzhen Longjing Technology Co. Ltd. Products: BEMS API Problem Types: CWE-552, CWE-22 Description: Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint. The 'fileName' parameter is not properly sanitized, allowing attackers to craft traversal sequences and access sensitive files outside the intended directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5657.php - https://www.exploit-db.com/e
lnrichment: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5657.php - https://www.exploit-db.com/exploits/50163 - https://packetstormsecurity.com/files/163702 - https://cxsecurity.com/issue/WLB-2021070173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/206477 - https://web.archive.org/web/20220527162453/http://www.ljkj2012.com/ - https://www.vulncheck.com/advisories/longjing-technology-bems-api-remote-arbitrary-file-download
CVE ID: CVE-2021-4464 State: PUBLISHED Published: 2025-11-12T22:09:20.835Z Last Updated: 2025-11-21T15:36:02.534Z Vendors: FiberHome Products: AN5506-04-FA, HG6245D Problem Types: CWE-121 Description: FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service ('webs') fails to enforce maximum lengths for Cookie header values. When a cookie longer than 511 bytes is processed, a stack buffer is overrun, leading to a crash or potential control of execution flow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilit
otes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#misc-remote-stack-overflow-an5506 - https://pierrekim.github.io/advisories/2021-fiberhome-0x00-ont.txt - https://www.vulncheck.com/advisories/fiberhome-routers-remote-stack-overflow
CVE ID: CVE-2021-4465 State: PUBLISHED Published: 2025-11-14T22:51:28.004Z Last Updated: 2025-11-18T16:28:12.048Z Vendors: ReQuest Serious Play LLC Products: ReQuest Serious Play Pro, ReQuest Serious Play Problem Types: CWE-400 Description: ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 contain a remote denial-of-service vulnerability. The device can be shut down or rebooted by an unauthenticated attacker through a single crafted HTTP GET request, allowing remote interruption of service availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-
ity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5601.php - https://www.exploit-db.com/exploits/48951 - https://packetstorm.news/files/id/159602 - https://cxsecurity.com/issue/WLB-2020100122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190031 - http://www.request.com/ - https://www.vulncheck.com/advisories/request-serious-play-f3-media-server-remote-dos
CVE ID: CVE-2021-4466 State: PUBLISHED Published: 2025-11-14T22:52:44.463Z Last Updated: 2025-11-17T20:34:34.580Z Vendors: IPCop Project Products: IPCop Problem Types: CWE-78 Description: IPCop versions up to and including 2.1.9 contain an authenticated remote code execution vulnerability within the web-based administration interface. The email configuration component inserts user-controlled values, including the EMAIL_PW parameter, directly into system-level operations without proper input sanitation. By modifying the email password field to include shell metacharacters and issuing a save-and-test-mail action, an authenticated attacker can execute arbitrary operating system commands with th
d issuing a save-and-test-mail action, an authenticated attacker can execute arbitrary operating system commands with the privileges of the web interface, resulting in full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/50183 - https://www.ipcop.org/ - https://sourceforge.net/projects/ipcop/ - https://www.vulncheck.com/advisories/ipcop-authenticated-rce
CVE ID: CVE-2021-4467 State: PUBLISHED Published: 2025-11-14T22:51:47.690Z Last Updated: 2025-11-18T16:33:01.126Z Vendors: Positive Technologies Products: MaxPatrol 8 (Server), XSpider (Server) Problem Types: CWE-400 Description: Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remote attacker can repeatedly issue HTTPS requests to the service, causing excessive allocation of session identifiers. Under load, session identifier collisions may occur, for
e service, causing excessive allocation of session identifiers. Under load, session identifier collisions may occur, forcing active client sessions to disconnect and resulting in service disruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulners.com/zdt/1337DAY-ID-36775 - https://cxsecurity.com/issue/WLB-2021090114 - https://www.ptsecurity.com/ - https://www.vulncheck.com/advisories/positive-technologies-maxpatrol-8-and-xspider-remote-dos
CVE ID: CVE-2021-4468 State: PUBLISHED Published: 2025-11-14T22:52:05.351Z Last Updated: 2025-11-17T20:37:28.498Z Vendors: PLANEX COMMUNICATIONS Inc. Products: CS-QP50F-ING2 Problem Types: CWE-306 Description: PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authentication. A remote, unauthenticated attacker can directly retrieve a compressed configuration backup file from the device. The backup contains sensitive configuration information, including credentials, allowing an attacker to obtain administrative access to the camera and compromise the confidentiality of the monitored environment. Additional Analyst Notes: - CISA ADP Vulnr
o the camera and compromise the confidentiality of the monitored environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://packetstorm.news/files/id/160805/ - https://cxsecurity.com/issue/WLB-2021010050 - https://www.planex.co.jp/products/cs-qp50f/ - https://www.vulncheck.com/advisories/planex-cs-qp50f-ing2-smart-camera-remote-configuration-disclosure
CVE ID: CVE-2021-4469 State: PUBLISHED Published: 2025-11-14T22:53:04.754Z Last Updated: 2025-11-17T14:38:39.748Z Vendors: Denver Products: SHO-110 Problem Types: CWE-306, CWE-1242 Description: Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by directly requesting the 'snapshot' endpoint. An attacker can repeatedly collect snapshots and reconstruct the camera stream, compromising the confidentiality of the monitored environment. Additional Analyst Notes:
reconstruct the camera stream, compromising the confidentiality of the monitored environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/50162 - http://old.denver.eu/products/smart-home-security/denver-sho-110/c-1024/c-1243/p-3826 - https://www.vulncheck.com/advisories/denver-sho-110-ip-camera-unauthenticated-snapshot-access
CVE ID: CVE-2021-4470 State: PUBLISHED Published: 2025-11-14T22:50:45.716Z Last Updated: 2025-11-18T16:20:30.649Z Vendors: TG8 Products: TG8 Firewall Problem Types: CWE-78 Description: TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to execute arbitrary operating system commands as root, resulting in full device compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-an
nalyst Notes: - CISA ADP Vulnrichment: References: - https://ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-and-password-disclosure/ - https://web.archive.org/web/20211024224240/http://www.tg8security.com/ - https://www.vulncheck.com/advisories/tg8-firewall-unauthenticated-rce-via-runphpcmd-php
CVE ID: CVE-2021-4471 State: PUBLISHED Published: 2025-11-14T22:50:25.482Z Last Updated: 2025-11-17T20:44:47.274Z Vendors: TG8 Products: TG8 Firewall Problem Types: CWE-538 Description: TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated attacker can enumerate and download files within the directory to obtain valid account usernames and passwords, leading to loss of confidentiality and further unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-and-password-disclosure/ -
Vulnrichment: References: - https://ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-and-password-disclosure/ - https://web.archive.org/web/20211024224240/http://www.tg8security.com/ - https://www.vulncheck.com/advisories/tg8-firewall-unauthenticated-user-password-disclosure
CVE ID: CVE-2022-0001 State: PUBLISHED Published: 2022-03-11T00:00:00.000Z Last Updated: 2025-05-05T16:44:34.239Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html - http://www.openwall.com/lists/oss-security/2022/03/18/2 - https://www.oracle.com/security-alerts/cpujul2022.html - https://s
://www.openwall.com/lists/oss-security/2022/03/18/2 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220818-0004/ - https://www.kb.cert.org/vuls/id/155143
CVE ID: CVE-2022-0002 State: PUBLISHED Published: 2022-03-11T17:54:36.000Z Last Updated: 2025-05-05T16:44:17.326Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html - http://www.openwall.com/lists/oss-security/2022/03/18/2 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.ne
nwall.com/lists/oss-security/2022/03/18/2 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220818-0004/
CVE ID: CVE-2022-0003 State: REJECTED Published: N/A Last Updated: 2025-05-27T15:08:59.591Z Description: No description available.
CVE ID: CVE-2022-0004 State: PUBLISHED Published: 2022-05-12T16:36:02.000Z Last Updated: 2025-05-05T16:44:05.603Z Vendors: n/a Products: Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT Problem Types: escalation of privilege Description: Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html
CVE ID: CVE-2022-0005 State: PUBLISHED Published: 2022-05-12T16:36:04.000Z Last Updated: 2025-05-05T16:43:56.233Z Vendors: n/a Products: Intel(R) Processors with SGX Problem Types: information disclosure Description: Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html
CVE ID: CVE-2022-0010 State: PUBLISHED Published: 2023-05-22T07:22:51.662Z Last Updated: 2025-01-21T21:43:10.565Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: QCS 800xA, QCS AC450, Platform Engineering Tools Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA
ker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=3BUS221709&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.108646530.1437951308.1684739395-1142547495.1678209228
CVE ID: CVE-2022-0011 State: PUBLISHED Published: 2022-02-10T18:10:15.524395Z Last Updated: 2024-09-16T23:51:26.574Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access Problem Types: CWE-436 Description: PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom URL category list or by using an external dynamic list (EDL) in a URL Filtering profile. When the entries in these lists have a hostname pattern that does not end with a forwa
(EDL) in a URL Filtering profile. When the entries in these lists have a hostname pattern that does not end with a forward slash (/) or a hostname pattern that ends with an asterisk (*), any URL that starts with the specified pattern is considered a match. Entries with a caret (^) at the end of a hostname pattern match any top level domain. This may inadvertently allow or block more URLs than intended and allowing more URLs than intended represents a security risk. For example: example.com will match example.com.website.test example.com.* will match example.com.website.test example.com.^ will match example.com.test You should take special care when using such entries in policy rules that all
example.com.^ will match example.com.test You should take special care when using such entries in policy rules that allow traffic. Where possible, use the exact list of hostname names ending with a forward slash (/) instead of using wildcards. PAN-OS 10.1 versions earlier than PAN-OS 10.1.3; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 9.1 versions earlier than PAN-OS 9.1.12; all PAN-OS 9.0 versions; PAN-OS 8.1 versions earlier than PAN-OS 8.1.21, and Prisma Access 2.2 and 2.1 versions do not allow customers to change this behavior without changing the URL category list or EDL. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/
ory list or EDL. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0011
CVE ID: CVE-2022-0012 State: PUBLISHED Published: 2022-01-12T17:30:15.528091Z Last Updated: 2024-09-17T01:55:48.198Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-59 Description: An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Co
5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0012
CVE ID: CVE-2022-0013 State: PUBLISHED Published: 2022-01-12T17:30:17.158913Z Last Updated: 2024-09-16T17:58:02.852Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-538 Description: A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions ear
x XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0013
CVE ID: CVE-2022-0014 State: PUBLISHED Published: 2022-01-12T17:30:18.718839Z Last Updated: 2024-09-16T23:00:50.618Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-426 Description: An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can then be unintentionally executed by another local user when that user utilizes a Live Terminal session. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex
a Live Terminal session. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0014
CVE ID: CVE-2022-0015 State: PUBLISHED Published: 2022-01-12T17:30:20.503695Z Last Updated: 2024-09-17T02:51:40.031Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-427 Description: A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9. Additional Analyst Notes: - CVE Program Container: References: - https://security
s earlier than Cortex XDR agent 6.1.9. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2022-0015