CVE-2018-10139

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-16 · updated 2026-06-17
Weakness: CWE-79

Description

The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected.

Affected products

Palo Alto Networks PAN-OS: through 6.1.21; from 7.1.0 through 7.1.18; from 8.0.0 through 8.0.11

References

http://www.securityfocus.com/bid/105111
http://www.securitytracker.com/id/1041544
https://security.paloaltonetworks.com/CVE-2018-10139
http://www.securityfocus.com/bid/105111
http://www.securitytracker.com/id/1041544
https://security.paloaltonetworks.com/CVE-2018-10139

Get alerted when CVE-2018-10139 or the next vulnerability affects your stack