CVE-2025-4234 LOW

CVE-2025-4234: Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials

Vendor Palo Alto Networks
Product Cortex XDR Microsoft 365 Defender Pack
Weakness CWE-532 · Sensitive info in logs
Published September 12, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

2.4/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber

What the vulnerability does

01Description

A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.

Key dates

02Disclosure timeline

September 12, 2025 CVE published
February 26, 2026 Record updated