Palo Alto Networks security advisory (AV25-587)

Serial number: AV25-587
Date: September 11, 2025

On September 10, 2025, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• Cortex XDR Microsoft 365 Defender Pack 4.6.0 windows – versions prior to 4.6.5
• User-ID Credential Agent 11.0.0 Windows – versions prior to 11.0.2-133
• User-ID Credential Agent 11.0.0 Windows – versions prior to 11.0.3
• Prisma Access Browser – version prior to 139.12.4.128

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• CVE-2025-4234 Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
• CVE-2025-4235 User-ID Credential Agent: Cleartext Exposure of Service Account password
• PAN-SA-2025-0015 Chromium: Monthly Vulnerability Update (September 2025)
• Palo Alto Network Security Advisories