Vulnerability · Published May 14, 2025 · Assigned by palo_alto

CVE-2025-0137PAN-OS: Improper Neutralization of Input in the Management Web Interface

Medium 4.8

In plain English

A medium-severity security flaw in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 4.0)4.8Medium

Exploit odds (30 days)0.4%top 63.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	Cloud NGFW	see references
Palo Alto Networks	PAN-OS	11.2.0 – before 11.2.511.1.0 – before 11.1.810.2.0 – before 10.2.1310.1.0 – before 10.1.14-h14

Weakness: CWE-83 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C/RE:M/U:Amber

References

https://security.paloaltonetworks.com/CVE-2025-0137 vendor-advisory