Skip to contentPalo Alto Networks vulnerabilities
Newest
- palo alto networks pan-os openconfig pluginPAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig PluginCVE-2025-01108.6 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Read Vulnerability in the Management Web InterfaceCVE-2025-0111In KEV7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web InterfaceCVE-2025-01096.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web InterfaceCVE-2025-0108In KEVPublic exploitEPSS 98.5%8.8 High
- palo alto networks expedition, pan-os, cloud ngfw +2 more +4 moreExpedition: OS Command Injection VulnerabilityCVE-2025-0107EPSS 78.4%7.7 High
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Wildcard Expansion VulnerabilityCVE-2025-01066.9 Medium
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Arbitrary File Deletion VulnerabilityCVE-2025-0105EPSS 13.2%6.9 Medium
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Cross-Site Scripting (XSS) VulnerabilityCVE-2025-01047.0 High
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: SQL Injection VulnerabilityCVE-2025-01039.2 Critical
- palo alto networks pan-os, cloud ngfw, paloaltonetworks prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketCVE-2024-3393In KEVEPSS 30.2%8.7 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect ios app +1 more +3 moreGlobalProtect App: Insufficient Certificate Validation Leads to Privilege EscalationCVE-2024-59216.0 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfaceCVE-2024-9474In KEVPublic exploitEPSS 93.8%6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)CVE-2024-0012In KEVPublic exploitEPSS 99.8%9.3 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted PacketCVE-2024-25508.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate AdministratorCVE-2024-59204.6 Medium
- palo alto networks pan-os, cloud ngfw +1 morePAN-OS: Server-Side Request Forgery in WildFireCVE-2024-59172.1 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)CVE-2024-25526.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect UserCVE-2024-59185.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authenticated XML External Entities (XXE) Injection VulnerabilityCVE-2024-59195.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketCVE-2024-25518.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted TrafficCVE-2024-94728.7 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2024-94735.2 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in XML APICVE-2024-94715.1 Medium
- palo alto networks cortex xsoarCortex XSOAR: Information Disclosure VulnerabilityCVE-2024-94705.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the AgentCVE-2024-94695.7 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketCVE-2024-94688.2 High
- palo alto networks expeditionExpedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session DisclosureCVE-2024-94677.0 High
- palo alto networks expeditionExpedition: Cleartext Storage of Information Leads to Firewall Admin Credential DisclosureCVE-2024-9466Public exploitEPSS 13.6%8.2 High
- palo alto networks expeditionExpedition: SQL Injection Leads to Firewall Admin Credential DisclosureCVE-2024-9465In KEVPublic exploitEPSS 99.6%9.2 Critical
- palo alto networks expeditionExpedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential DisclosureCVE-2024-9464Public exploitEPSS 82.6%9.3 Critical
- palo alto networks expeditionExpedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential DisclosureCVE-2024-9463In KEVPublic exploitEPSS 98.5%9.9 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect PortalCVE-2024-86915.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows Administrator Can Disable the AgentCVE-2024-86905.6 Medium
- palo alto networks activemq content packActiveMQ Content Pack: Cleartext Exposure of CredentialsCVE-2024-86896.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)CVE-2024-86886.7 Medium
- palo alto networks globalprotect app, pan-os, paloaltonetworks globalprotect +2 more +4 morePAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesCVE-2024-86876.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Command Injection VulnerabilityCVE-2024-86868.6 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Cleartext Exposure of External System SecretsCVE-2024-59166.0 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2024-59155.2 Medium
- palo alto networks cortex xsoar commonscriptsCortex XSOAR: Command Injection in CommonScripts PackCVE-2024-59147.0 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Input Validation Vulnerability in PAN-OSCVE-2024-59136.1 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Improper File Signature Verification ChecksCVE-2024-59126.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Panorama Web InterfaceCVE-2024-59117.0 High
- palo alto networks expeditionExpedition: Missing Authentication Leads to Admin Account TakeoverCVE-2024-5910In KEVPublic exploitEPSS 91.7%9.3 Critical
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the AgentCVE-2024-5909Public exploit6.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Encrypted Credential Exposure via Log FilesCVE-2024-59085.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Privilege Escalation (PE) VulnerabilityCVE-2024-59075.2 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2024-59064.8 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disrupt Functionality of the AgentCVE-2024-59052.0 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectCVE-2024-3400In KEVPublic exploitEPSS 100.0%10.0 Critical
- Show moreLoading…