Vulnerability CVE-2024-5906


Published: 2024-06-12

Description:
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.

 References:
https://security.paloaltonetworks.com/CVE-2024-5906

Copyright 2026, cxsecurity.com

 

Back to Top