CVE-2018-10141: Palo Alto Networks PAN-OS

Medium severity, CVSS 6.1. EPSS: 3.9% chance of exploitation in the next 30 days.

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML.

Affected products

• Palo Alto Networks PAN-OS: before 6.1.0 (fixed in 6.1.0); from 7.0.0, up to and including 7.0.19; from 8.1.0, before 8.1.4 (fixed in 8.1.4)

Published 2018-10-12. Last modified 2026-06-17.