CVE-2024-5914

7.0 highEPSS 1.2%

High (7.0) in paloaltonetworks cortex xsoar commonscripts. EPSS 1.2% chance of exploitation in the next 30 days.

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container.

Severity

CVSS 4.0

7.0 high

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2024-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:cortex_xsoar_commonscripts

References

https://security.paloaltonetworks.com/CVE-2024-5914

Check your stack JSON