What is the CVSS score of CVE-2025-4233?

CVE-2025-4233 has a CVSS 4.0 base score of 5.1 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber. EPSS exploitation probability: 0.0%.

Which versions of Paloalto are affected by CVE-2025-4233?

CVE-2025-4233 presents moderate security risk rated CVSS 5.1. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-4233?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Paloalto CVE-2025-4233

EUVD-2025-18221 MEDIUM

Use of Cache Containing Sensitive Information (CWE-524)

2025-06-12 psirt@paloaltonetworks.com

Authentication Bypass Paloalto

5.1

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

136.24.1.93

EUVD ID Assigned

Mar 14, 2026 - 21:20 euvd

EUVD-2025-18221

Analysis Generated

Mar 14, 2026 - 21:20 vuln.today

CVE Published

Jun 12, 2025 - 23:15 nvd

MEDIUM 5.1

DescriptionNVD

An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies.

AnalysisAI

CVE-2025-4233 is a security vulnerability (CVSS 5.1) that allows users. Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-4233 vulnerability details – vuln.today

Back