CVE-2015-4162

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-02 · updated 2026-06-17

Description

XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data.

Affected products

Palo Alto Networks PAN-OS: through 5.0.15; 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 (+6) (and their updates)

References

http://www.securityfocus.com/bid/74941
https://security.paloaltonetworks.com/CVE-2015-4162
http://www.securityfocus.com/bid/74941
https://security.paloaltonetworks.com/CVE-2015-4162

Get alerted when CVE-2015-4162 or the next vulnerability affects your stack