CVE-2019-1565

5.4 mediumEPSS 0.7%

Medium (5.4) in paloaltonetworks pan-os. EPSS 0.7% chance of exploitation in the next 30 days.

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:pan-os

References

http://www.securityfocus.com/bid/106752
https://security.paloaltonetworks.com/CVE-2019-1565
http://www.securityfocus.com/bid/106752
https://security.paloaltonetworks.com/CVE-2019-1565

Check your stack JSON