Palo Alto Networks Traps vulnerabilities

3 CVEs affecting Palo Alto Networks Traps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1991, published 2020-04-08.

More from Palo Alto Networks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-7408, published 2017-04-14. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging improper validation of requests to revoke a Traps agent license.
• CVE-2019-1577, published 2019-07-01. Medium severity, CVSS 6.3. EPSS: 0.9% chance of exploitation in the next 30 days. Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScript or HTML.
• CVE-2020-1991, published 2020-04-08. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks…