What is CVE-2022-0011?

CVE-2022-0011 is a medium-severity vulnerability in Palo Alto Networks Pan-os, classified under CWE-436. CVSS score: 6.5/10. Published 2022-02-10.

How severe is CVE-2022-0011?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Palo Alto Networks Pan-os

CVE-2022-0011

PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom…

EPSS: 0.007 (47.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Palo Alto Networks Pan-os — versions 9.0.*, 8.1, 9.1
Palo Alto Networks Prisma Access — versions 3.0 Preferred, Innovation, 2.2 Preferred, 2.1 Preferred, Innovation
Paloaltonetworks Pan-os
Paloaltonetworks Prisma_access — versions 2.1, 2.2

Weakness classification (CWE)

CWE-436

References

psirt@paloaltonetworks.com (x_refsource_MISC, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2022-0011?: CVE-2022-0011 is a medium-severity vulnerability in Palo Alto Networks Pan-os, classified under CWE-436. CVSS score: 6.5/10. Published 2022-02-10.
How severe is CVE-2022-0011?: Medium severity. CVSS v3 base score is 6.5 out of 10.