Skip to contentPaloaltonetworks Pan-os vulnerabilities
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) in Web InterfaceCVE-2021-30528.0 High
- palo alto networks pan-osPAN-OS: OS Command Injection Vulnerability in Web InterfaceCVE-2021-30508.8 High
- palo alto networks pan-osPAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall OutageCVE-2021-30485.9 Medium
- palo alto networks pan-osPAN-OS: Weak Cryptography Used in Web Interface AuthenticationCVE-2021-30474.2 Medium
- palo alto networks pan-osPAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect PortalCVE-2021-30466.8 Medium
- palo alto networks pan-osPAN-OS: OS Command Argument Injection in Web InterfaceCVE-2021-30454.9 Medium
- palo alto networks pan-osPAN-OS: Secrets for scheduled configuration exports are logged in system logsCVE-2021-30372.3 Low
- palo alto networks pan-osPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectlyCVE-2021-30364.4 Medium
- palo alto networks pan-osPAN-OS: Configuration secrets for log forwarding may be logged in system logsCVE-2021-30324.4 Medium
- palo alto networks pan-osPAN-OS: Information exposure in Ethernet data frame construction (Etherleak)CVE-2021-30314.3 Medium
- palo alto networks pan-osPAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verificationCVE-2020-20508.2 High
- palo alto networks pan-osPAN-OS: System proxy passwords may be logged in clear text while viewing system stateCVE-2020-20483.3 Low
- palo alto networks pan-osPAN-OS: Panorama session disclosure during context switch into managed deviceCVE-2020-20227.5 High
- palo alto networks pan-osPAN-OS: OS command injection and memory corruption vulnerabilityCVE-2020-20007.2 High
- palo alto networks pan-osPAN-OS: Threat signatures are evaded by specifically crafted packetsCVE-2020-19995.3 Medium
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text while storing operational command (op command) historyCVE-2020-20443.3 Low
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logsCVE-2020-20433.3 Low
- palo alto networks pan-osPAN-OS: Buffer overflow in the management web interfaceCVE-2020-20427.2 High
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS)CVE-2020-20417.5 High
- palo alto networks pan-osPAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabledCVE-2020-20409.8 Critical
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file uploadCVE-2020-2039EPSS 46.4%5.3 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interfaceCVE-2020-2038Public exploitEPSS 86.2%7.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interfaceCVE-2020-20377.2 High
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interfaceCVE-2020-2036EPSS 23.9%8.8 High
- palo alto networks pan-osPAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessionsCVE-2020-20353.0 Low
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in GlobalProtect portalCVE-2020-2034Public exploit8.1 High
- palo alto networks pan-osPAN-OS: Integer underflow in the management interfaceCVE-2020-20314.9 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management interfaceCVE-2020-20307.2 High
- palo alto networks pan-osPAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered servicesCVE-2020-19824.8 Medium
- palo alto networks pan-osPAN-OS: Authentication Bypass in SAML AuthenticationCVE-2020-2021In KEVPublic exploit10.0 Critical
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in management interface certificate generatorCVE-2020-20297.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verificationCVE-2020-20287.2 High
- palo alto networks pan-osPAN-OS: Buffer overflow in authd authentication responseCVE-2020-20277.2 High
- palo alto networks pan-osPAN-OS: Panorama authentication bypass vulnerabilityCVE-2020-20189.0 Critical
- palo alto networks pan-osPAN-OS: DOM-Based cross site scripting vulnerability in management web interfaceCVE-2020-20178.8 High
- palo alto networks pan-osPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalationCVE-2020-20167.0 High
- palo alto networks pan-osPAN-OS: Buffer overflow in the management serverCVE-2020-20158.8 High
- palo alto networks pan-osPAN-OS: OS injection vulnerability in PAN-OS management serverCVE-2020-20148.8 High
- palo alto networks pan-osPAN-OS: Panorama context switch session cookie disclosureCVE-2020-20138.3 High
- palo alto networks pan-osPAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leakCVE-2020-20127.5 High
- palo alto networks pan-osPAN-OS: Panorama registration denial of serviceCVE-2020-20117.5 High
- palo alto networks pan-osPAN-OS: Authenticated user command injection vulnerabilityCVE-2020-20107.2 High
- palo alto networks pan-osPAN-OS: Panorama SD WAN arbitrary file creationCVE-2020-20097.2 High
- palo alto networks pan-osPAN-OS: OS command injection or arbitrary file deletion vulnerabilityCVE-2020-20087.2 High
- palo alto networks pan-osPAN-OS: OS command injection in management serverCVE-2020-20077.2 High
- palo alto networks pan-osPAN-OS: Buffer overflow in management server payload parserCVE-2020-20067.2 High
- palo alto networks pan-osPAN-OS: GlobalProtect Clientless VPN session hijackingCVE-2020-20057.1 High
- palo alto networks pan-osPAN-OS: Authenticated administrator can delete arbitrary system fileCVE-2020-20036.5 Medium
- palo alto networks pan-osPAN-OS: Spoofed Kerberos key distribution center authentication bypassCVE-2020-20028.1 High
- palo alto networks pan-osPAN-OS: Panorama External control of file vulnerability leads to privilege escalationCVE-2020-20018.1 High
- Show moreLoading…