CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

Showing results for 
Show  only  | Search instead for 
Did you mean: 

CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

L3 Networker

Just want to know CVE-2022-36067 is it cover in any Palo Alto Signature ? 

I tried to search it in Threat Vault and Security Advisories also do not have information related to this CVE is that means Palo Alto firewall will not detect this vulnerability? 


Accepted Solutions

A signature (TID: 93195) for the vulnerability (CVE-2022-36067) was released in content version 8639.

View solution in original post


L5 Sessionator

Currently, Palo Alto Networks is researching on the vulnerability. There's no signature available yet.


For your reference: "A vulnerability/CVE is released; when will the vulnerability signature[IPS] be released? Why do some CVEs not have vulnerability signatures? What is default action?"


When there's an update, I can share the status here.

Hi Ymiyashita, 


Thanks for your reply, according to the KB does it mean the signature will available soon? 


Hi @JiaXiang,


Regarding this particular vulnerability (CVE-2022-36067), Palo Alto Networks is still researching on it. At this time, there's no ETA.

Hi @ymiyashita ,


Any update for this CVE-2022-36067 ? 

Do you know usually for 1 vulnerability need how much time to research? 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!