UpHeron
All vulnerabilities

Servers and applications

CVE-2019-1565

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.

Severity
Medium 5.4
Published
30 Jan 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.7% in the next 30 daysHigher than 52% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • Every version up to 7.1.21
  • From 7.1.22 up to 8.0.14
  • From 8.0.15 up to 8.1.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-1565
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-1565