CVE-2018-9337

https://notcve.org/view.php?id=CVE-2018-9337

The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML. La página de interfaz web de administración de PAN-OS en PAN-OS 6.1.20 y anteriores, PAN-OS 7.1.17 y anteriores, PAN-OS 8.0.10 y anteriores y PAN-OS 8.1.1 y anteriores podría permitir que un atacante inyecte código HTML o JavaScript arbitrario. • http://www.securityfocus.com/bid/104657 http://www.securitytracker.com/id/1041240 https://security.paloaltonetworks.com/CVE-2018-9337 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •