Skip to contentPalo Alto Networks vulnerabilities
Newest
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before LogonCVE-2022-00167.4 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: URL Category Exceptions Match More URLs Than Intended in URL FilteringCVE-2022-00116.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityCVE-2022-00157.8 High
- palo alto networks cortex xdr agentCortex XDR Agent: Unintended Program Execution When Using Live Terminal SessionCVE-2022-00146.7 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: File Information Exposure Vulnerability When Generating Support FileCVE-2022-00135.0 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Arbitrary File Deletion VulnerabilityCVE-2022-00126.1 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-3064Public exploitEPSS 20.1%9.8 Critical
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-30637.5 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect UsersCVE-2021-30628.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)CVE-2021-30616.4 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)CVE-2021-3060Public exploitEPSS 32.5%8.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability When Performing Dynamic UpdatesCVE-2021-30598.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in Web Interface XML APICVE-2021-30588.8 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML AuthenticationCVE-2021-30568.8 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or GatewayCVE-2021-30578.1 High
- palo alto networks pan-osPAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web InterfaceCVE-2021-30556.5 Medium
- palo alto networks pan-osPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityCVE-2021-30547.2 High
- palo alto networks pan-osPAN-OS: Exceptional Condition Denial-of-Service (DoS)CVE-2021-30537.5 High
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) in Web InterfaceCVE-2021-30528.0 High
- palo alto networks cortex xsoarCortex XSOAR: Authentication Bypass in SAML AuthenticationCVE-2021-30518.1 High
- palo alto networks cortex xsoarCortex XSOAR: Improper Authorization of Incident Investigations VulnerabilityCVE-2021-30492.6 Low
- palo alto networks pan-osPAN-OS: OS Command Injection Vulnerability in Web InterfaceCVE-2021-30508.8 High
- palo alto networks pan-osPAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall OutageCVE-2021-30485.9 Medium
- palo alto networks pan-osPAN-OS: Weak Cryptography Used in Web Interface AuthenticationCVE-2021-30474.2 Medium
- palo alto networks pan-osPAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect PortalCVE-2021-30466.8 Medium
- palo alto networks pan-osPAN-OS: OS Command Argument Injection in Web InterfaceCVE-2021-30454.9 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web ConsoleCVE-2021-30437.5 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege EscalationCVE-2021-30427.8 High
- palo alto networks cortex xsoarCortex XSOAR: Unauthorized Usage of the REST APICVE-2021-30449.8 Critical
- palo alto networks cortex xdr agentCortex XDR Agent: Improper control of user-controlled file leads to local privilege escalationCVE-2021-30417.8 High
- palo alto networks bridgecrew checkovBridgecrew Checkov: Unsafe deserialization of Terraform files allows code executionCVE-2021-3040Fix available6.7 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: User role authorization secret for Console leaked through log file exportCVE-2021-30393.8 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Windows VPN kernel driver denial of service (DoS)CVE-2021-30385.5 Medium
- palo alto networks pan-osPAN-OS: Secrets for scheduled configuration exports are logged in system logsCVE-2021-30372.3 Low
- palo alto networks pan-osPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectlyCVE-2021-30364.4 Medium
- palo alto networks bridgecrew checkovBridgecrew Checkov: Unsafe deserialization of Terraform files allows code executionCVE-2021-3035Fix available6.7 Medium
- palo alto networks cortex xsoarCortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logsCVE-2021-30345.1 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: SAML Authentication Bypass Vulnerability in ConsoleCVE-2021-30339.1 Critical
- palo alto networks pan-osPAN-OS: Configuration secrets for log forwarding may be logged in system logsCVE-2021-30324.4 Medium
- palo alto networks pan-osPAN-OS: Information exposure in Ethernet data frame construction (Etherleak)CVE-2021-30314.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Improper control of loaded DLL leads to local privilege escalationCVE-2020-20497.8 High
- palo alto networks cortex xdr agentCortex XDR Agent: Exceptional condition denial-of-service (DoS)CVE-2020-20205.5 Medium
- palo alto networks pan-osPAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verificationCVE-2020-20508.2 High
- palo alto networks pan-osPAN-OS: System proxy passwords may be logged in clear text while viewing system stateCVE-2020-20483.3 Low
- palo alto networks pan-osPAN-OS: Panorama session disclosure during context switch into managed deviceCVE-2020-20227.5 High
- palo alto networks pan-osPAN-OS: OS command injection and memory corruption vulnerabilityCVE-2020-20007.2 High
- palo alto networks pan-osPAN-OS: Threat signatures are evaded by specifically crafted packetsCVE-2020-19995.3 Medium
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text while storing operational command (op command) historyCVE-2020-20443.3 Low
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logsCVE-2020-20433.3 Low
- palo alto networks pan-osPAN-OS: Buffer overflow in the management web interfaceCVE-2020-20427.2 High
- Show moreLoading…