CVE-2014-3764: Palo Alto Networks PAN-OS

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5.0.15, 5.1.x before 5.1.10, and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Ref ID 64563.

Affected products

• Palo Alto Networks PAN-OS: up to and including 5.0.14; version 5.1 only; version 5.1.1 only; version 5.1.2 only; version 5.1.3 only; version 5.1.4 only; …

Published 2015-01-06. Last modified 2026-06-17.