Skip to contentPalo Alto Networks vulnerabilities
Newest
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS)CVE-2020-20417.5 High
- palo alto networks pan-osPAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabledCVE-2020-20409.8 Critical
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file uploadCVE-2020-2039EPSS 46.4%5.3 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interfaceCVE-2020-2038Public exploitEPSS 86.2%7.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interfaceCVE-2020-20377.2 High
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interfaceCVE-2020-2036EPSS 23.9%8.8 High
- palo alto networks pan-osPAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessionsCVE-2020-20353.0 Low
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in GlobalProtect portalCVE-2020-2034Public exploit8.1 High
- palo alto networks pan-osPAN-OS: Integer underflow in the management interfaceCVE-2020-20314.9 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management interfaceCVE-2020-20307.2 High
- palo alto networks pan-osPAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered servicesCVE-2020-19824.8 Medium
- palo alto networks pan-osPAN-OS: Authentication Bypass in SAML AuthenticationCVE-2020-2021In KEVPublic exploit10.0 Critical
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookieCVE-2020-20335.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgradeCVE-2020-20327.0 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in management interface certificate generatorCVE-2020-20297.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verificationCVE-2020-20287.2 High
- palo alto networks pan-osPAN-OS: Buffer overflow in authd authentication responseCVE-2020-20277.2 High
- palo alto networks pan-osPAN-OS: Panorama authentication bypass vulnerabilityCVE-2020-20189.0 Critical
- palo alto networks pan-osPAN-OS: DOM-Based cross site scripting vulnerability in management web interfaceCVE-2020-20178.8 High
- palo alto networks pan-osPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalationCVE-2020-20167.0 High
- palo alto networks pan-osPAN-OS: Buffer overflow in the management serverCVE-2020-20158.8 High
- palo alto networks pan-osPAN-OS: OS injection vulnerability in PAN-OS management serverCVE-2020-20148.8 High
- palo alto networks pan-osPAN-OS: Panorama context switch session cookie disclosureCVE-2020-20138.3 High
- palo alto networks pan-osPAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leakCVE-2020-20127.5 High
- palo alto networks pan-osPAN-OS: Panorama registration denial of serviceCVE-2020-20117.5 High
- palo alto networks pan-osPAN-OS: Authenticated user command injection vulnerabilityCVE-2020-20107.2 High
- palo alto networks pan-osPAN-OS: Panorama SD WAN arbitrary file creationCVE-2020-20097.2 High
- palo alto networks pan-osPAN-OS: OS command injection or arbitrary file deletion vulnerabilityCVE-2020-20087.2 High
- palo alto networks pan-osPAN-OS: OS command injection in management serverCVE-2020-20077.2 High
- palo alto networks pan-osPAN-OS: Buffer overflow in management server payload parserCVE-2020-20067.2 High
- palo alto networks pan-osPAN-OS: GlobalProtect Clientless VPN session hijackingCVE-2020-20057.1 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logsCVE-2020-20046.8 Medium
- palo alto networks pan-osPAN-OS: Authenticated administrator can delete arbitrary system fileCVE-2020-20036.5 Medium
- palo alto networks pan-osPAN-OS: Spoofed Kerberos key distribution center authentication bypassCVE-2020-20028.1 High
- palo alto networks pan-osPAN-OS: Panorama External control of file vulnerability leads to privilege escalationCVE-2020-20018.1 High
- palo alto networks pan-osPAN-OS: Improper SAML SSO authorization of shared local usersCVE-2020-19985.4 Medium
- palo alto networks pan-osPAN-OS: GlobalProtect registration open redirectCVE-2020-19975.3 Medium
- palo alto networks pan-osPAN-OS: Panorama management server log injectionCVE-2020-19965.3 Medium
- palo alto networks pan-osPAN-OS: Management server rasmgr denial of serviceCVE-2020-19954.9 Medium
- palo alto networks pan-osPAN-OS: Predictable temporary file vulnerabilityCVE-2020-19944.1 Medium
- palo alto networks pan-osPAN-OS: GlobalProtect Portal PHP session fixation vulnerabilityCVE-2020-19933.7 Low
- palo alto networks pan-osPAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalationCVE-2020-19928.1 High
- palo alto networks cortex xdr, traps +1 moreTraps: Insecure temporary file vulnerability may allow privilege escalation on WindowsCVE-2020-19917.8 High
- palo alto networks pan-osPAN-OS: Buffer overflow in the management serverCVE-2020-19907.2 High
- palo alto networks global protect agent, paloaltonetworks globalprotect +1 moreGlobal Protect Agent: Incorrect privilege assignment allows local privilege escalationCVE-2020-19897.0 High
- palo alto networks global protect agent, paloaltonetworks globalprotect +1 moreGlobal Protect Agent: Local privilege escalation due to an unquoted search path vulnerabilityCVE-2020-19884.2 Medium
- palo alto networks global protect agent, paloaltonetworks globalprotect +1 moreGlobal Protect Agent: VPN cookie local information disclosureCVE-2020-19873.9 Low
- paloaltonetworks pan-os, vm-series, palo alto networks vm-series plugin +2 moreVM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMsCVE-2020-19785.8 Medium
- palo alto networks pan-osPAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalationCVE-2020-19798.1 High
- palo alto networks pan-osPAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commandsCVE-2020-19807.8 High
- Show moreLoading…