VULNERABILITY INTELLIGENCE

CVE-2023-0003

CVSS score6.5 MEDIUM
EPSS probability1.33%
CISA KEVNot currently listed
Published2023-02-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

Weakness classification

  • CWE-73: External Control of File Name or Path
  • CWE-610: Externally Controlled Reference to a Resource in Another Sphere

Primary references