CVE-2017-7409: Palo Alto Networks PAN-OS

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Palo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via crafted request parameters, aka PAN-SA-2017-0011 and PAN-70674.

Affected products

• Palo Alto Networks PAN-OS: up to and including 7.0.14

Published 2017-04-21. Last modified 2026-06-17.