CVE-2025-4618

MEDIUM4.4

Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser

Published Nov 14, 2025

Modified 2 months ago

No fix available

Details

A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser.

Browser self-protection should be enabled to mitigate this issue.

References

ADVISORYhttps://security.paloaltonetworks.com/CVE-2025-4618 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-4618

CVSS Analysis

CVSS v4.0

4.4

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Attack Requirements

NoneAT:N

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

HighVC:H

Vuln. Integrity

LowVI:L

Vuln. Availability

NoneVA:N

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

4.4/CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Weakness Type (CWE)

Other

CWE-316

Ecosystems

Timeline

PublishedNov 14, 2025

ModifiedNov 17, 2025

CVE-2025-4618 | Mondoo Vulnerability Intelligence