Palo Alto Networks Prisma Access Browser vulnerabilities

2 CVEs affecting Palo Alto Networks Prisma Access Browser, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4233, published 2025-06-12.

More from Palo Alto Networks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-4233, published 2025-06-12. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies.
• CVE-2025-0129, published 2025-04-11. Critical severity, CVSS 9.3. EPSS: 0.2% chance of exploitation in the next 30 days. An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use…