CVE-2025-0129: palo alto networks prisma access browser
CVSS: 9.3v4.0CriticalDeferred
Published 11-04-2025Last modified 13-06-2025
Vulnerability summary
CVE-2025-0129 is a critical (CVSS 9.3) vulnerability in palo alto networks prisma access browser. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.4% of scored vulnerabilities.
CVSS score
9.3/10
010
Critical · v4.0 (CVE.org)EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 11-04-2025PublishedVulnerability first disclosed.
- 13-06-2025Last modifiedVulnerability information updated.
Description
An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.
CVSS metrics
2 scores · 2 sources · 1 versionCritical 9.3Preferred score · CVE.org (CNA)
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/AU:N/R:U/V:D/RE:L/U:AmberSourcesAll 2 agree
- NVDNIST9.3CriticalCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
0.00 pp
From 0.18% on 21-09-2026
21-09-202621-10-2026
EPSS score0.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
- CWE-306Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Affected systems
Palo alto networks1 product
- prisma access browser≥ 1, < 132.83.3017.1
1 vendor · 1 product
References
1 links- security.paloaltonetworks.com/PAN-SA-2025-0008Vendor Advisory