CVE-2013-5664: Palo Alto Networks PAN-OS

Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.

Affected products

• Palo Alto Networks PAN-OS: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2013-08-31. Last modified 2026-06-16.