CVE-2019-1565

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-30 · updated 2026-06-17
Weakness: CWE-79

Description

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.

Affected products

Palo Alto Networks PAN-OS: through 7.1.21; from 7.1.22 through 8.0.14; from 8.0.15 through 8.1.5
Palo Alto Networks PAN-OS: PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier.

References

http://www.securityfocus.com/bid/106752
https://security.paloaltonetworks.com/CVE-2019-1565
http://www.securityfocus.com/bid/106752
https://security.paloaltonetworks.com/CVE-2019-1565

Get alerted when CVE-2019-1565 or the next vulnerability affects your stack