PT-2025-37083 · Palo Alto Networks · Cortex Xdr Microsoft 365 Defender Pack

·

CVE-2025-4234

·

Published

2025-09-10

·

Updated

2025-09-19

CVSS v4.0

2.4

Low

VectorAV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber
Name of the Vulnerable Software and Affected Versions: Cortex XDR Microsoft 365 Defender Pack (affected versions not specified)
Description: The Cortex XDR Microsoft 365 Defender Pack may allow cleartext exposure of credentials. The severity of this issue is low.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-16022
CVE-2025-4234

Affected Products

Cortex Xdr Microsoft 365 Defender Pack