Skip to contentPalo Alto Networks Pan-os vulnerabilities
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted PacketsCVE-2024-33827.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability LossCVE-2024-24334.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2024-00114.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect PortalCVE-2024-00104.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper IP Address Verification in GlobalProtect GatewayCVE-2024-00096.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfaceCVE-2024-00086.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2024-00076.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: XML API Keys Revoked by Read-Only PAN-OS AdministratorCVE-2023-67932.7 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Plaintext Disclosure of External System Integration CredentialsCVE-2023-67914.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67894.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the Web InterfaceCVE-2023-67955.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Web InterfaceCVE-2023-67945.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the XML APICVE-2023-67925.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67908.8 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Read System Files and Resources During Configuration CommitCVE-2023-380465.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2023-00105.4 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web InterfaceCVE-2023-00084.4 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2023-00076.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Exposure of Sensitive Information VulnerabilityCVE-2023-00054.1 Medium
- palo alto networks pan-os, fedoraproject fedora, palo alto networks cloud ngfw +1 more +3 morePAN-OS: Local File Deletion VulnerabilityCVE-2023-00046.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authentication Bypass in Web InterfaceCVE-2022-00308.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringCVE-2022-0028In KEV8.6 High
- palo alto networks pan-osPAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration CommitCVE-2022-00247.2 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in DNS ProxyCVE-2022-00235.9 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password HashesCVE-2022-00224.1 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: URL Category Exceptions Match More URLs Than Intended in URL FilteringCVE-2022-00116.5 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-3064Public exploitEPSS 20.1%9.8 Critical
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-30637.5 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect UsersCVE-2021-30628.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)CVE-2021-30616.4 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)CVE-2021-3060Public exploitEPSS 32.5%8.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability When Performing Dynamic UpdatesCVE-2021-30598.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in Web Interface XML APICVE-2021-30588.8 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML AuthenticationCVE-2021-30568.8 High
- palo alto networks pan-osPAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web InterfaceCVE-2021-30556.5 Medium
- palo alto networks pan-osPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityCVE-2021-30547.2 High
- palo alto networks pan-osPAN-OS: Exceptional Condition Denial-of-Service (DoS)CVE-2021-30537.5 High
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) in Web InterfaceCVE-2021-30528.0 High
- palo alto networks pan-osPAN-OS: OS Command Injection Vulnerability in Web InterfaceCVE-2021-30508.8 High
- palo alto networks pan-osPAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall OutageCVE-2021-30485.9 Medium
- palo alto networks pan-osPAN-OS: Weak Cryptography Used in Web Interface AuthenticationCVE-2021-30474.2 Medium
- palo alto networks pan-osPAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect PortalCVE-2021-30466.8 Medium
- palo alto networks pan-osPAN-OS: OS Command Argument Injection in Web InterfaceCVE-2021-30454.9 Medium
- palo alto networks pan-osPAN-OS: Secrets for scheduled configuration exports are logged in system logsCVE-2021-30372.3 Low
- palo alto networks pan-osPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectlyCVE-2021-30364.4 Medium
- palo alto networks pan-osPAN-OS: Configuration secrets for log forwarding may be logged in system logsCVE-2021-30324.4 Medium
- palo alto networks pan-osPAN-OS: Information exposure in Ethernet data frame construction (Etherleak)CVE-2021-30314.3 Medium
- palo alto networks pan-osPAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verificationCVE-2020-20508.2 High
- palo alto networks pan-osPAN-OS: System proxy passwords may be logged in clear text while viewing system stateCVE-2020-20483.3 Low
- palo alto networks pan-osPAN-OS: Panorama session disclosure during context switch into managed deviceCVE-2020-20227.5 High
- Show moreLoading…