Skip to contentPalo Alto Networks Prisma Access vulnerabilities
- palo alto networks globalprotect app, pan-os, paloaltonetworks globalprotect +2 more +4 morePAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesCVE-2024-86876.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Command Injection VulnerabilityCVE-2024-86868.6 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Cleartext Exposure of External System SecretsCVE-2024-59166.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Input Validation Vulnerability in PAN-OSCVE-2024-59136.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Panorama Web InterfaceCVE-2024-59117.0 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectCVE-2024-3400In KEVPublic exploitEPSS 100.0%10.0 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect SSL VPNCVE-2024-33884.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information DisclosureCVE-2024-33875.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Predefined Decryption Exclusions Does Not Work as IntendedCVE-2024-33865.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) when GTP Security is DisabledCVE-2024-33857.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsCVE-2024-33847.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)CVE-2024-33837.4 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted PacketsCVE-2024-33827.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability LossCVE-2024-24334.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2024-00114.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect PortalCVE-2024-00104.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper IP Address Verification in GlobalProtect GatewayCVE-2024-00096.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfaceCVE-2024-00086.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2024-00076.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: XML API Keys Revoked by Read-Only PAN-OS AdministratorCVE-2023-67932.7 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Plaintext Disclosure of External System Integration CredentialsCVE-2023-67914.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67894.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the Web InterfaceCVE-2023-67955.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Web InterfaceCVE-2023-67945.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the XML APICVE-2023-67925.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67908.8 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Read System Files and Resources During Configuration CommitCVE-2023-380465.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2023-00105.4 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web InterfaceCVE-2023-00084.4 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2023-00076.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Exposure of Sensitive Information VulnerabilityCVE-2023-00054.1 Medium
- palo alto networks pan-os, fedoraproject fedora, palo alto networks cloud ngfw +1 more +3 morePAN-OS: Local File Deletion VulnerabilityCVE-2023-00046.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authentication Bypass in Web InterfaceCVE-2022-00308.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringCVE-2022-0028In KEV8.6 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in DNS ProxyCVE-2022-00235.9 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password HashesCVE-2022-00224.1 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: URL Category Exceptions Match More URLs Than Intended in URL FilteringCVE-2022-00116.5 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-3064Public exploitEPSS 20.1%9.8 Critical
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-30637.5 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect UsersCVE-2021-30628.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)CVE-2021-30616.4 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)CVE-2021-3060Public exploitEPSS 32.5%8.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability When Performing Dynamic UpdatesCVE-2021-30598.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in Web Interface XML APICVE-2021-30588.8 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML AuthenticationCVE-2021-30568.8 High