CVE-2021-3043

Name of the Vulnerable Software and Affected Versions Prisma Cloud Compute versions prior to 20.12.552 Prisma Cloud Compute versions prior to 21.04.439

Description A reflected cross-site scripting (XSS) issue exists in the Prisma Cloud Compute web console, allowing a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface.

Recommendations For Prisma Cloud Compute versions prior to 20.12.552, update to version 20.12.552 or later. For Prisma Cloud Compute versions prior to 21.04.439, update to version 21.04.439 or later. No additional action is required for Prisma Cloud Compute SaaS versions, as they were automatically upgraded to the fixed release.