CVE-2023-0003

MEDIUM 6.5CVE-2023-0003 · Published 08/02/2023 · updated 17/06/2026

In short

CVE-2023-0003 is a MEDIUM (CVSS 6.5) vulnerability affecting cortex xsoar (paloaltonetworks).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.0% of all vulnerabilities.
Fix: update to 6.10.0.185964 or later.

Package	Affected versions	Patched versions
cortex xsoar paloaltonetworks	`= 6.6.0= 6.8.0= 6.9.0≥ 6.10.0, < 6.10.0.185964`	`6.10.0.185964`

Description

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

References

lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5 · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG · Mailing List

More vulnerabilities in cortex xsoar

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free