CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Palo Alto, PAN-OS. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-5919
Severity
MEDIUM
CVSS
6.5
EPSS
0.35%
Palo Alto PAN-OS
Original NVD Description
A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface.
Related CVEs
Other vulnerabilities affecting the same vendor(s)