CVE-2018-10141 Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting · CloudMap

中危CVE-2018-10141

Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting

披露于 2018/10/12 · 更新于 2025/07/17

CVSS 评分6.1/ 10.0

EPSS 概率50.7%百分位 97.7%

漏洞描述

Palo Alto Networks PAN-OS before 8.1.4 GlobalProtect Portal Login page allows an unauthenticated attacker to inject arbitrary JavaScript or HTML, making it vulnerable to cross-site scripting.

影响产品

paloaltonetworkspan-os查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

security.paloaltonetworks.comhttps://security.paloaltonetworks.com/CVE-2018-10141↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2018-10141↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗github.comhttps://github.com/Elsfa7-110/kenzer-templates↗

RELATED INTELLIGENCE

同产品关联漏洞

与 pan-os 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2026-0257 Palo Alto Networks PAN-OS - Authentication Bypass pan-os	严重	—	—	PoCEXP	2026/06/25
CVE-2025-0133 PAN-OS - Reflected Cross-Site Scripting pan-os	中危	6.9	4.3%	PoCEXP	2025/05/14
CVE-2025-0108 PAN-OS Management Interface - Path Confusion to Authentication Bypass pan-os	高危	10.0	94.1%	PoCEXP	2024/12/20
CVE-2024-3400RCE GlobalProtect - OS Command Injection pan-os	严重	10.0	94.3%	PoCEXP	2024/04/12
CVE-2024-9474RCE PAN-OS Management Web Interface - Command Injection pan-os	高危	7.2	94.3%	PoCEXP	2024/03/13
CVE-2024-0012RCE PAN-OS Management Web Interface - Authentication Bypass pan-os	严重	9.8	94.3%	PoCEXP	2024/01/10