Skip to contentPalo Alto Networks vulnerabilities
Newest
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect SSL VPNCVE-2024-33884.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information DisclosureCVE-2024-33875.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Predefined Decryption Exclusions Does Not Work as IntendedCVE-2024-33865.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) when GTP Security is DisabledCVE-2024-33857.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsCVE-2024-33847.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)CVE-2024-33837.4 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted PacketsCVE-2024-33827.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability LossCVE-2024-24334.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2024-2432Public exploit4.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local User Can Disable GlobalProtectCVE-2024-24315.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2024-00114.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect PortalCVE-2024-00104.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper IP Address Verification in GlobalProtect GatewayCVE-2024-00096.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfaceCVE-2024-00086.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2024-00076.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: XML API Keys Revoked by Read-Only PAN-OS AdministratorCVE-2023-67932.7 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Plaintext Disclosure of External System Integration CredentialsCVE-2023-67914.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67894.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the Web InterfaceCVE-2023-67955.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Web InterfaceCVE-2023-67945.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the XML APICVE-2023-67925.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67908.8 High
- palo alto networks cortex xsoarCortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR EngineCVE-2023-32826.4 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the AgentCVE-2023-3280Public exploit5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Read System Files and Resources During Configuration CommitCVE-2023-380465.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2023-00097.8 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2023-00105.4 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web InterfaceCVE-2023-00084.4 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2023-00076.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local File Deletion VulnerabilityCVE-2023-00066.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Exposure of Sensitive Information VulnerabilityCVE-2023-00054.1 Medium
- palo alto networks pan-os, fedoraproject fedora, palo alto networks cloud ngfw +1 more +3 morePAN-OS: Local File Deletion VulnerabilityCVE-2023-00046.5 Medium
- palo alto networks cortex xsoar, fedoraproject fedora +1 moreCortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR ServerCVE-2023-00036.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Product Disruption by Local Windows UserCVE-2023-00025.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Cleartext Exposure of Agent Admin PasswordCVE-2023-00016.0 Medium
- palo alto networks cortex xsoarCortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR EngineCVE-2022-00316.7 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authentication Bypass in Web InterfaceCVE-2022-00308.1 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support FileCVE-2022-00295.5 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringCVE-2022-0028In KEV8.6 High
- palo alto networks cortex xsoarCortex XSOAR: Incorrect Authorization Vulnerability When Generating ReportsCVE-2022-00274.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) VulnerabilityCVE-2022-00266.7 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityCVE-2022-00256.7 Medium
- palo alto networks pan-osPAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration CommitCVE-2022-00247.2 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in DNS ProxyCVE-2022-00235.9 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password HashesCVE-2022-00224.1 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Using Connect Before LogonCVE-2022-00213.3 Low
- palo alto networks cortex xsoarCortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web InterfaceCVE-2022-0020Public exploit6.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Insufficiently Protected Credentials Vulnerability on LinuxCVE-2022-00194.7 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On EnabledCVE-2022-00186.1 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege EscalationCVE-2022-00177.0 High
- Show moreLoading…