CVE-2025-4617

LOW1.1

Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

Published Nov 14, 2025

Modified 2 months ago

No fix available

Details

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser.

Browser self-protection should be enabled to mitigate this issue.

References

ADVISORYhttps://security.paloaltonetworks.com/CVE-2025-4617 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-4617

CVSS Analysis

CVSS v4.0

1.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Attack Requirements

NoneAT:N

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

LowVC:L

Vuln. Integrity

NoneVI:N

Vuln. Availability

NoneVA:N

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

1.1/CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:U/V:D/RE:M/U:Amber

Weakness Type (CWE)

Other

CWE-424

Ecosystems

Timeline

PublishedNov 14, 2025

ModifiedNov 14, 2025

CVE-2025-4617 | Mondoo Vulnerability Intelligence