CVE-2017-9458

Critical

Published: 07/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The XXE vulnerability in the GlobalProtect gateway interface in PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause denial of service, or conduct SSRF attacks.

Risk Assessment

Attackers can exploit this vulnerability to gain access to sensitive data or disrupt system operations, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update PAN-OS to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

XML external entity (XXE) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or conduct server-side request forgery (SSRF) attacks via unspecified vectors.