Skip to contentPalo Alto Networks Pan-os vulnerabilities
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web InterfaceCVE-2025-42318.6 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devicesCVE-2025-01365.3 Medium
- palo alto networks pan-os, cloud ngfw +1 morePAN-OS: Improper Neutralization of Input in the Management Web InterfaceCVE-2025-01374.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and PortalCVE-2025-0133Public exploitEPSS 46.3%1.2 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted PacketsCVE-2025-01308.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet CapturesCVE-2025-01235.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketCVE-2025-01288.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-SeriesCVE-2025-01277.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Session Fixation Vulnerability in GlobalProtect SAML LoginCVE-2025-01268.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Improper Neutralization of Input in the Management Web InterfaceCVE-2025-01256.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Deletion Vulnerability on the Management Web InterfaceCVE-2025-01245.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP FrameCVE-2025-01166.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLICVE-2025-01156.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Denial of Service (DoS) in GlobalProtectCVE-2025-01148.2 High
- palo alto networks pan-os openconfig pluginPAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig PluginCVE-2025-01108.6 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Read Vulnerability in the Management Web InterfaceCVE-2025-0111In KEV7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web InterfaceCVE-2025-01096.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web InterfaceCVE-2025-0108In KEVPublic exploitEPSS 98.5%8.8 High
- palo alto networks expedition, pan-os, cloud ngfw +2 more +4 moreExpedition: OS Command Injection VulnerabilityCVE-2025-0107EPSS 78.4%7.7 High
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Wildcard Expansion VulnerabilityCVE-2025-01066.9 Medium
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Arbitrary File Deletion VulnerabilityCVE-2025-0105EPSS 13.2%6.9 Medium
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Cross-Site Scripting (XSS) VulnerabilityCVE-2025-01047.0 High
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: SQL Injection VulnerabilityCVE-2025-01039.2 Critical
- palo alto networks pan-os, cloud ngfw, paloaltonetworks prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketCVE-2024-3393In KEVEPSS 30.2%8.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfaceCVE-2024-9474In KEVPublic exploitEPSS 93.8%6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)CVE-2024-0012In KEVPublic exploitEPSS 99.8%9.3 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted PacketCVE-2024-25508.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate AdministratorCVE-2024-59204.6 Medium
- palo alto networks pan-os, cloud ngfw +1 morePAN-OS: Server-Side Request Forgery in WildFireCVE-2024-59172.1 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)CVE-2024-25526.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect UserCVE-2024-59185.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authenticated XML External Entities (XXE) Injection VulnerabilityCVE-2024-59195.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketCVE-2024-25518.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted TrafficCVE-2024-94728.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in XML APICVE-2024-94715.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketCVE-2024-94688.2 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect PortalCVE-2024-86915.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)CVE-2024-86886.7 Medium
- palo alto networks globalprotect app, pan-os, paloaltonetworks globalprotect +2 more +4 morePAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesCVE-2024-86876.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Command Injection VulnerabilityCVE-2024-86868.6 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Cleartext Exposure of External System SecretsCVE-2024-59166.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Input Validation Vulnerability in PAN-OSCVE-2024-59136.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Panorama Web InterfaceCVE-2024-59117.0 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectCVE-2024-3400In KEVPublic exploitEPSS 100.0%10.0 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect SSL VPNCVE-2024-33884.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information DisclosureCVE-2024-33875.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Predefined Decryption Exclusions Does Not Work as IntendedCVE-2024-33865.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) when GTP Security is DisabledCVE-2024-33857.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsCVE-2024-33847.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)CVE-2024-33837.4 High
- Show moreLoading…