Skip to contentPaloaltonetworks vulnerabilities
Newest
- palo alto networks pan-osPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityCVE-2021-30547.2 High
- palo alto networks pan-osPAN-OS: Exceptional Condition Denial-of-Service (DoS)CVE-2021-30537.5 High
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) in Web InterfaceCVE-2021-30528.0 High
- palo alto networks cortex xsoarCortex XSOAR: Authentication Bypass in SAML AuthenticationCVE-2021-30518.1 High
- palo alto networks cortex xsoarCortex XSOAR: Improper Authorization of Incident Investigations VulnerabilityCVE-2021-30492.6 Low
- palo alto networks pan-osPAN-OS: OS Command Injection Vulnerability in Web InterfaceCVE-2021-30508.8 High
- palo alto networks pan-osPAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall OutageCVE-2021-30485.9 Medium
- palo alto networks pan-osPAN-OS: Weak Cryptography Used in Web Interface AuthenticationCVE-2021-30474.2 Medium
- palo alto networks pan-osPAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect PortalCVE-2021-30466.8 Medium
- palo alto networks pan-osPAN-OS: OS Command Argument Injection in Web InterfaceCVE-2021-30454.9 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web ConsoleCVE-2021-30437.5 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege EscalationCVE-2021-30427.8 High
- palo alto networks cortex xsoarCortex XSOAR: Unauthorized Usage of the REST APICVE-2021-30449.8 Critical
- palo alto networks cortex xdr agentCortex XDR Agent: Improper control of user-controlled file leads to local privilege escalationCVE-2021-30417.8 High
- palo alto networks bridgecrew checkovBridgecrew Checkov: Unsafe deserialization of Terraform files allows code executionCVE-2021-3040Fix available6.7 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: User role authorization secret for Console leaked through log file exportCVE-2021-30393.8 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Windows VPN kernel driver denial of service (DoS)CVE-2021-30385.5 Medium
- palo alto networks pan-osPAN-OS: Secrets for scheduled configuration exports are logged in system logsCVE-2021-30372.3 Low
- palo alto networks pan-osPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectlyCVE-2021-30364.4 Medium
- palo alto networks bridgecrew checkovBridgecrew Checkov: Unsafe deserialization of Terraform files allows code executionCVE-2021-3035Fix available6.7 Medium
- palo alto networks cortex xsoarCortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logsCVE-2021-30345.1 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: SAML Authentication Bypass Vulnerability in ConsoleCVE-2021-30339.1 Critical
- palo alto networks pan-osPAN-OS: Configuration secrets for log forwarding may be logged in system logsCVE-2021-30324.4 Medium
- palo alto networks pan-osPAN-OS: Information exposure in Ethernet data frame construction (Etherleak)CVE-2021-30314.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Improper control of loaded DLL leads to local privilege escalationCVE-2020-20497.8 High
- palo alto networks cortex xdr agentCortex XDR Agent: Exceptional condition denial-of-service (DoS)CVE-2020-20205.5 Medium
- palo alto networks pan-osPAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verificationCVE-2020-20508.2 High
- palo alto networks pan-osPAN-OS: System proxy passwords may be logged in clear text while viewing system stateCVE-2020-20483.3 Low
- palo alto networks pan-osPAN-OS: Panorama session disclosure during context switch into managed deviceCVE-2020-20227.5 High
- palo alto networks pan-osPAN-OS: OS command injection and memory corruption vulnerabilityCVE-2020-20007.2 High
- palo alto networks pan-osPAN-OS: Threat signatures are evaded by specifically crafted packetsCVE-2020-19995.3 Medium
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text while storing operational command (op command) historyCVE-2020-20443.3 Low
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logsCVE-2020-20433.3 Low
- palo alto networks pan-osPAN-OS: Buffer overflow in the management web interfaceCVE-2020-20427.2 High
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS)CVE-2020-20417.5 High
- palo alto networks pan-osPAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabledCVE-2020-20409.8 Critical
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file uploadCVE-2020-2039EPSS 46.4%5.3 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interfaceCVE-2020-2038Public exploitEPSS 86.2%7.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interfaceCVE-2020-20377.2 High
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interfaceCVE-2020-2036EPSS 23.9%8.8 High
- palo alto networks pan-osPAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessionsCVE-2020-20353.0 Low
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in GlobalProtect portalCVE-2020-2034Public exploit8.1 High
- palo alto networks pan-osPAN-OS: Integer underflow in the management interfaceCVE-2020-20314.9 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management interfaceCVE-2020-20307.2 High
- palo alto networks pan-osPAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered servicesCVE-2020-19824.8 Medium
- palo alto networks pan-osPAN-OS: Authentication Bypass in SAML AuthenticationCVE-2020-2021In KEVPublic exploit10.0 Critical
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookieCVE-2020-20335.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgradeCVE-2020-20327.0 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in management interface certificate generatorCVE-2020-20297.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verificationCVE-2020-20287.2 High
- Show moreLoading…