A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.Palo Alto Networks is not aware of any malicious exploitation of this issue.This issue is fixed in PAN-OS 10.1.14, PAN-OS 10.2.11, PAN-OS 11.0.6, PAN-OS 11.1.4, and all later PAN-OS versions.cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h14::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h13::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h12::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h11::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.1:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.5:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.5:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h12::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h11::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-::::::cpe:2.3:o:paloaltonetworks:pan-os:11.0:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h14::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h13::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h12::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h11::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h13::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h12::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h11::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h16::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h15::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h14::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h13::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h12::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h11::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h13::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h10::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.2:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.13:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.13:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.12:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.11:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.10:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.10:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.10:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.10:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.10:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.10:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.7:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.7:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h8::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h7::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.6:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.5:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.5:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.5:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.5:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.5:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.4:h6::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.4:h5::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.4:h4::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.4:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.4:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.4:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.4:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.3:h3::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.3:h2::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.3:h1::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.3:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.2:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.1:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1.0:-::::::cpe:2.3:o:paloaltonetworks:pan-os:10.1:-::::::Show MoreShow Less
