Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Paloaltonetworks

Paloaltonetworks vulnerabilities

Products

Pan-os238
Globalprotect43
Cortex Xdr Agent20
Expedition16
Prisma Access Agent12
Cortex Xsoar11
Prisma Access9
Prisma Browser6
Prisma Cloud4
Cloud Ngfw3
Expedition Migration Tool3
Idira Endpoint Privilege Manager3
Secdo3
Terminal Services Agent3
Traps3
Bridgecrew Checkov2
Panorama Virtual Appliance2
Prisma Sd-wan2
Trust Protection Foundation2

Newest

Known exploitedIn KEVPublic exploitFix available

palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Plaintext Disclosure of External System Integration CredentialsCVE-2023-67914.9 MediumDecember 13, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67894.3 MediumDecember 13, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the Web InterfaceCVE-2023-67955.5 MediumDecember 13, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Web InterfaceCVE-2023-67945.5 MediumDecember 13, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the XML APICVE-2023-67925.5 MediumDecember 13, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2023-67908.8 HighDecember 13, 2023
palo alto networks cortex xsoarCortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR EngineCVE-2023-32826.4 MediumNovember 8, 2023
palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the AgentCVE-2023-3280Public exploit5.5 MediumSeptember 13, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Read System Files and Resources During Configuration CommitCVE-2023-380465.5 MediumJuly 12, 2023
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2023-00097.8 HighJune 14, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2023-00105.4 MediumJune 14, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web InterfaceCVE-2023-00084.4 MediumMay 10, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2023-00076.5 MediumMay 10, 2023
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local File Deletion VulnerabilityCVE-2023-00066.3 MediumApril 12, 2023
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Exposure of Sensitive Information VulnerabilityCVE-2023-00054.1 MediumApril 12, 2023
palo alto networks pan-os, fedoraproject fedora, palo alto networks cloud ngfw +1 more +3 morePAN-OS: Local File Deletion VulnerabilityCVE-2023-00046.5 MediumApril 12, 2023
palo alto networks cortex xsoar, fedoraproject fedora +1 moreCortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR ServerCVE-2023-00036.5 MediumFebruary 8, 2023
palo alto networks cortex xdr agentCortex XDR Agent: Product Disruption by Local Windows UserCVE-2023-00025.5 MediumFebruary 8, 2023
palo alto networks cortex xdr agentCortex XDR Agent: Cleartext Exposure of Agent Admin PasswordCVE-2023-00016.0 MediumFebruary 8, 2023
palo alto networks cortex xsoarCortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR EngineCVE-2022-00316.7 MediumNovember 9, 2022
palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authentication Bypass in Web InterfaceCVE-2022-00308.1 HighOctober 12, 2022
palo alto networks cortex xdr agentCortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support FileCVE-2022-00295.5 MediumSeptember 14, 2022
palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringCVE-2022-0028In KEV8.6 HighAugust 10, 2022
palo alto networks cortex xsoarCortex XSOAR: Incorrect Authorization Vulnerability When Generating ReportsCVE-2022-00274.3 MediumMay 11, 2022
palo alto networks cortex xdr agentCortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) VulnerabilityCVE-2022-00266.7 MediumMay 11, 2022
palo alto networks cortex xdr agentCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityCVE-2022-00256.7 MediumMay 11, 2022
palo alto networks pan-osPAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration CommitCVE-2022-00247.2 HighMay 11, 2022
palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in DNS ProxyCVE-2022-00235.9 MediumApril 13, 2022
palo alto networks pan-os, prisma access +1 morePAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password HashesCVE-2022-00224.1 MediumMarch 9, 2022
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Using Connect Before LogonCVE-2022-00213.3 LowFebruary 10, 2022
palo alto networks cortex xsoarCortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web InterfaceCVE-2022-0020Public exploit6.8 MediumFebruary 10, 2022
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Insufficiently Protected Credentials Vulnerability on LinuxCVE-2022-00194.7 MediumFebruary 10, 2022
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On EnabledCVE-2022-00186.1 MediumFebruary 10, 2022
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege EscalationCVE-2022-00177.0 HighFebruary 10, 2022
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before LogonCVE-2022-00167.4 HighFebruary 10, 2022
palo alto networks pan-os, prisma access +1 morePAN-OS: URL Category Exceptions Match More URLs Than Intended in URL FilteringCVE-2022-00116.5 MediumFebruary 10, 2022
palo alto networks cortex xdr agentCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityCVE-2022-00157.8 HighJanuary 12, 2022
palo alto networks cortex xdr agentCortex XDR Agent: Unintended Program Execution When Using Live Terminal SessionCVE-2022-00146.7 MediumJanuary 12, 2022
palo alto networks cortex xdr agentCortex XDR Agent: File Information Exposure Vulnerability When Generating Support FileCVE-2022-00135.0 MediumJanuary 12, 2022
palo alto networks cortex xdr agentCortex XDR Agent: Local Arbitrary File Deletion VulnerabilityCVE-2022-00126.1 MediumJanuary 12, 2022
palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-3064Public exploitEPSS 20.1%9.8 CriticalNovember 10, 2021
palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway InterfacesCVE-2021-30637.5 HighNovember 10, 2021
palo alto networks pan-os, prisma access +1 morePAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect UsersCVE-2021-30628.1 HighNovember 10, 2021
palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)CVE-2021-30616.4 MediumNovember 10, 2021
palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)CVE-2021-3060Public exploitEPSS 32.5%8.1 HighNovember 10, 2021
palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability When Performing Dynamic UpdatesCVE-2021-30598.1 HighNovember 10, 2021
palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in Web Interface XML APICVE-2021-30588.8 HighNovember 10, 2021
palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML AuthenticationCVE-2021-30568.8 HighNovember 10, 2021
palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or GatewayCVE-2021-30578.1 HighOctober 13, 2021
palo alto networks pan-osPAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web InterfaceCVE-2021-30556.5 MediumSeptember 8, 2021
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open