category: Vulnerability Management
provider: Palo Alto Networks
sectionorder:
- Connect
- Collect
commonfields:
  id: Palo Alto Networks Security Advisories
  version: -1
configuration:
- defaultvalue: https://security.paloaltonetworks.com/api/v1
  display: Default URL for PAN-OS advisories website
  name: url
  type: 0
  required: false
  section: Connect
- additionalinfo: The Palo Alto Networks product name to fetch indicators for, such as "PAN-OS"
  defaultvalue: PAN-OS
  display: Fetch indicator product name
  name: fetch_product_name
  type: 0
  required: false
  section: Collect
- name: feed
  defaultvalue: 'true'
  display: Fetch indicators
  type: 8
  required: false
  section: Collect
- name: feedReputation
  display: Indicator Reputation
  type: 18
  options:
  - None
  - Good
  - Suspicious
  - Bad
  additionalinfo: Indicators from this integration instance will be marked with this reputation
  required: false
  section: Collect
- name: feedReliability
  display: Source Reliability
  type: 15
  required: true
  options:
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  additionalinfo: Reliability of the source providing the intelligence data
  section: Collect
- name: feedExpirationPolicy
  display: ''
  type: 17
  options:
  - never
  - interval
  - indicatorType
  - suddenDeath
  required: false
  section: Collect
- name: feedExpirationInterval
  display: ''
  type: 1
  required: false
  section: Collect
- name: feedFetchInterval
  display: Feed Fetch Interval
  type: 19
  required: false
  section: Collect
- name: feedBypassExclusionList
  display: Bypass exclusion list
  type: 8
  additionalinfo: When selected, the exclusion list is ignored for indicators from this feed. This means that if an indicator from this feed is on the exclusion list, the indicator might still be added to the system.
  required: false
  section: Collect
- name: feedTags
  display: Tags
  type: 0
  additionalinfo: Supports CSV values.
  required: false
  section: Collect
- name: tlp_color
  display: Traffic Light Protocol Color
  options:
  - RED
  - AMBER
  - GREEN
  - WHITE
  type: 15
  additionalinfo: The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed
  required: false
  section: Collect
description: Queries the public repository of PAN-OS CVEs.
display: Palo Alto Networks Security Advisories (Beta)
beta: true
name: Palo Alto Networks Security Advisories
script:
  commands:
  - arguments:
    - default: true
      defaultValue: PAN-OS
      description: Product name to search for advisories; valid values for this item can be found in the sidebar at https://security.paloaltonetworks.com/
      name: product
    - defaultValue: -date
      description: Sort returned advisories by this value, can be date, cvss, etc. Leading hyphpen (-) indicates reverse search.
      name: sort
    - auto: PREDEFINED
      description: Filter advisories to this severity level only.
      name: severity
      predefined:
      - HIGH
      - CRITICAL
      - MEDIUM
      - LOW
      - NONE
    - description: Text search query - supports same search syntax as the GUI filter field.
      name: q
    description: Gets all the advisories for the given product.
    name: pan-advisories-get-advisories
    outputs:
    - contextPath: PANSecurityAdvisory.Advisory.data_type
      description: The type of advisory this is.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.data_format
      description: The format of the advisory, such as MITRE.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.cve_id
      description: The ID of the CVE described by this advisory.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.cve_date_public
      description: The date this CVE was released.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.cve_title
      description: The name of this CVE.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.description
      description: Human readable description of Advisory.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.cvss_score
      description: The CVSS Score.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.cvss_severity
      description: The CVSS Severity.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.cvss_vector_string
      description: The CVSS Vector string.
      type: String
    - contextPath: PANSecurityAdvisory.Advisory.affected_version_list
      description: List of affected versions strings.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  feed: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 6.5.0
tests:
- No tests (auto formatted)