Palo Alto Networks · Palo Alto Networks Traps · CVE-2015-2223
**Name of the Vulnerable Software and Affected Versions**
Palo Alto Networks Traps version 3.1.2.1546
**Description**
The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters in a SOAP request, including the `Arguments`, `FileName`, or `URL` parameter.
**Recommendations**
For version 3.1.2.1546, as a temporary workaround, consider restricting access to the SOAP request endpoints that utilize the `Arguments`, `FileName`, or `URL` parameters until a patch is available. Avoid using these parameters in SOAP requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.