Unscored severity · published Apr 14, 2015
CVE-2015-2223
Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546…
–
CVSS
4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the (1) Arguments, (2) FileName, or (3) URL parameter in a SOAP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TR
Traps · Palo Alto Networks
3.1.2.1546 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2223
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2223
Exploit
http://packetstormsecurity.com/files/131182/Palo-Alto-Traps-Server-3.1.2.1546-Cross-Site-Scripting.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/535113/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/73704
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2015-2223