CVE-2025-4234: Palo Alto Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
This Palo Alto advisory covers CVE-2025-4234 in Cortex XDR.
- CVE-2025-4234
Key facts
- Vendor rating
- Low, CVSS 2.4
- CISA KEV
- Not listed (catalogue checked )
- Affected
- Cortex XDR Microsoft 365 Defender Pack 4.6.0: < 4.6.5 on Windows
- Fixed in
- Cortex XDR Microsoft 365 Defender Pack >= 4.6.5
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes.
This means that these credentials are exposed to recipients of the application logs.
Text from the source record.
- Cortex XDR Microsoft 365 Defender Pack 4.6.0: < 4.6.5 on Windows
Official advisory · high-confidence parse· fetched ·verify at source
How to fix CVE-2025-4234
Upgrade to a fixed release named by Palo Alto:
- Cortex XDR Microsoft 365 Defender Pack >= 4.6.5
Vendor guidance
- VersionMinor VersionSuggested Solution Cortex XDR Microsoft 365 Defender Pack 4.6 on Windows 4.6.0 through 4.6.4 Upgrade to 4.6.5 or later.
Workaround status
- No known workarounds exist for this issue.
More Palo Alto Networks advisories
CVE-2026-0231Mar 11, 2026information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VMCVE-2026-0230Mar 11, 2026problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOSCVE-2025-4228Jun 12, 2025Cortex XDR Broker VM: Privilege Escalation (PE) VulnerabilityCVE-2026-111497Oct 26, 2026Portfolio Status: Impact of Brotli Vulnerability on Palo Alto Networks ProductsCVE-2026-109618Oct 21, 2026Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo AltoCVE-2026-0317Oct 14, 2026PAN-OS: Denial of Service Vulnerability
Palo Alto Networks advisories, September 2025All Palo Alto Networks advisories
Get an email when Palo Alto Cortex publishes the next one.
See Palo Alto Cortex's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Palo Alto Networks CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
