Skip to contentPalo Alto Networks vulnerabilities
Newest
- palo alto networks prisma browserPrisma Browser: Sensitive Information Disclosure Vulnerability in Prisma BrowserCVE-2025-46184.4 Medium
- palo alto networks prisma browserPrisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma BrowserCVE-2025-46171.1 Low
- palo alto networks prisma browserPrisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma BrowserCVE-2025-46161.1 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted PacketsCVE-2025-46196.6 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Improper Neutralization of Input in the Management Web InterfaceCVE-2025-4615Public exploit5.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Session Token Disclosure VulnerabilityCVE-2025-46144.8 Medium
- palo alto networks cortex xdr microsoft 365 defender packCortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of CredentialsCVE-2025-42342.4 Low
- palo alto networks user-id credential agentUser-ID Credential Agent: Cleartext Exposure of Service Account passwordCVE-2025-42357.2 High
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Secrets Shared Across Multiple Broker VM ImagesCVE-2025-21845.3 Medium
- palo alto networks globalprotect app, global protect uwp app +1 moreGlobalProtect App: Improper Certificate Validation Leads to Privilege EscalationCVE-2025-21835.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)CVE-2025-21825.6 Medium
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Cleartext Exposure of CredentialsCVE-2025-21815.9 Medium
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code ExecutionCVE-2025-21804.8 Medium
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Non Admin User Can Disable the GlobalProtect AppCVE-2025-21796.8 Medium
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Privilege Escalation (PE) VulnerabilityCVE-2025-01418.4 High
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Non Admin User Can Disable the GlobalProtect AppCVE-2025-01406.8 Medium
- palo alto networks autonomous digital experience managerAutonomous Digital Experience Manager: Privilege Escalation (PE) VulnerabilityCVE-2025-01396.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Interception in Endpoint Traffic Policy EnforcementCVE-2025-42271.0 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Traffic Information Disclosure VulnerabilityCVE-2025-42296.0 Medium
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Privilege Escalation (PE) VulnerabilityCVE-2025-42284.6 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin Command Injection Vulnerability Through CLICVE-2025-42308.4 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web InterfaceCVE-2025-42318.6 High
- paloaltonetworks globalprotect, palo alto networks globalprotect app +1 moreGlobalProtect: Authenticated Code Injection Through Wildcard on macOSCVE-2025-42328.5 High
- palo alto networks prisma access browserPrisma Access Browser: Inappropriate implementation in CacheCVE-2025-42335.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devicesCVE-2025-01365.3 Medium
- palo alto networks compute in prisma cloud enterprise edition, prisma cloud compute edition +1 morePrisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web InterfaceCVE-2025-01382.0 Low
- palo alto networks pan-os, cloud ngfw +1 morePAN-OS: Improper Neutralization of Input in the Management Web InterfaceCVE-2025-01374.8 Medium
- palo alto networks globalprotect app, globalprotect uwp app, paloaltonetworks globalprotect +2 moreGlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect AppCVE-2025-01355.2 Medium
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VMCVE-2025-01346.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and PortalCVE-2025-0133Public exploitEPSS 46.3%1.2 Low
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Unauthenticated User Can Disable Internal ServicesCVE-2025-01326.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted PacketsCVE-2025-01308.2 High
- palo alto networks prisma access browserPrisma Access Browser: Inappropriate control behavior in Prisma Access BrowserCVE-2025-01299.3 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet CapturesCVE-2025-01235.9 Medium
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VMCVE-2025-01196.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketCVE-2025-01288.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-SeriesCVE-2025-01277.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Session Fixation Vulnerability in GlobalProtect SAML LoginCVE-2025-01268.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Improper Neutralization of Input in the Management Web InterfaceCVE-2025-01256.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Deletion Vulnerability on the Management Web InterfaceCVE-2025-01245.1 Medium
- palo alto networks prisma sd-wanPrisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted PacketsCVE-2025-01225.1 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Crash the AgentCVE-2025-01216.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2025-01207.1 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Execution of Unsafe ActiveX Control VulnerabilityCVE-2025-01186.0 Medium
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2025-0117Public exploit7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP FrameCVE-2025-01166.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLICVE-2025-01156.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Denial of Service (DoS) in GlobalProtectCVE-2025-01148.2 High
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the AgentCVE-2025-01126.8 Medium
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersCVE-2025-01135.3 Medium
- Show moreLoading…