VDB

GCVE-110-NCSC-2025-220

GCVE-110-NCSC-2025-220
Advisory PublishedCVSS 6.5/10
Vulnetix · Advisory published July 9, 2025
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber

Weaknesses (CWE)

CWE-497Exposure of Sensitive System Information to an Unauthorized Control SphereCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')

Risk Scores

CVSS 3.1
6.5/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersionsPlatforms
PaloAlto Networksvers:unknown/<10.1.14-h16
PaloAlto Networksvers:unknown/<11.0.3
PaloAlto Networksvers:unknown/<10.2.8

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›