CVE-2025-4234: Palo Alto Networks Cortex Xdr Microsoft 365 Defender Pack

Low severity, CVSS 2.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.

Affected products

• Palo Alto Networks Cortex Xdr Microsoft 365 Defender Pack: from 4.6.0, before 11.0.2-133 (fixed in 11.0.2-133)

Published 2025-09-12. Last modified 2026-06-17.