VULNERABILITY INTELLIGENCE

CVE-2024-0011

CVSS score6.1 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2024-02-14

Last modified2026-06-17

Description

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of an authenticated Captive Portal user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.