← Database

CVE-2010-0475

MEDIUM CVSS: 4.3 Published: 2010-05-14 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter.

Affected Platforms

Palo Alto Networks Firewall

Weakness Type

CWE-79

References