CVE-2017-15941

Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://www.securityfocus.com/bid/102446Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040147Third Party Advisory, VDB Entry
• https://security.paloaltonetworks.com/CVE-2017-15941
• http://www.securityfocus.com/bid/102446Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040147Third Party Advisory, VDB Entry
• https://security.paloaltonetworks.com/CVE-2017-15941

Published

Jan 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15935Artica Pandora FMS version 7.0 is vulnerable to remote PHP c…
• CVE-2017-15936In Artica Pandora FMS version 7.0, an Attacker with write Pe…
• CVE-2017-15937Artica Pandora FMS version 7.0 leaks a full installation pat…
• CVE-2017-15938dwarf2.c in the Binary File Descriptor (BFD) library (aka li…
• CVE-2017-15939dwarf2.c in the Binary File Descriptor (BFD) library (aka li…
• CVE-2017-15940The web interface packet capture management component in Pal…
• CVE-2017-15942Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19…
• CVE-2017-15943The configuration file import for applications, spyware and …
• CVE-2017-15944Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19…9.8
• CVE-2017-15945The installation scripts in the Gentoo dev-db/mysql, dev-db/…
• CVE-2017-15946In the com_tag component 1.7.6 for Joomla!, a SQL injection …
• CVE-2017-15947Simple ASC Content Management System v1.2 has XSS in the loc…5.4