Skip to contentPaloaltonetworks vulnerabilities
Newest
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted PacketCVE-2024-25508.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate AdministratorCVE-2024-59204.6 Medium
- palo alto networks pan-os, cloud ngfw +1 morePAN-OS: Server-Side Request Forgery in WildFireCVE-2024-59172.1 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)CVE-2024-25526.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect UserCVE-2024-59185.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authenticated XML External Entities (XXE) Injection VulnerabilityCVE-2024-59195.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketCVE-2024-25518.7 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2024-94735.2 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in XML APICVE-2024-94715.1 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the AgentCVE-2024-94695.7 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketCVE-2024-94688.2 High
- palo alto networks expeditionExpedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session DisclosureCVE-2024-94677.0 High
- palo alto networks expeditionExpedition: Cleartext Storage of Information Leads to Firewall Admin Credential DisclosureCVE-2024-9466Public exploitEPSS 13.6%8.2 High
- palo alto networks expeditionExpedition: SQL Injection Leads to Firewall Admin Credential DisclosureCVE-2024-9465In KEVPublic exploitEPSS 99.6%9.2 Critical
- palo alto networks expeditionExpedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential DisclosureCVE-2024-9464Public exploitEPSS 82.6%9.3 Critical
- palo alto networks expeditionExpedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential DisclosureCVE-2024-9463In KEVPublic exploitEPSS 98.5%9.9 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect PortalCVE-2024-86915.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows Administrator Can Disable the AgentCVE-2024-86905.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)CVE-2024-86886.7 Medium
- palo alto networks globalprotect app, pan-os, paloaltonetworks globalprotect +2 more +4 morePAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesCVE-2024-86876.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Command Injection VulnerabilityCVE-2024-86868.6 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Cleartext Exposure of External System SecretsCVE-2024-59166.0 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2024-59155.2 Medium
- palo alto networks cortex xsoar commonscriptsCortex XSOAR: Command Injection in CommonScripts PackCVE-2024-59147.0 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Input Validation Vulnerability in PAN-OSCVE-2024-59136.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Panorama Web InterfaceCVE-2024-59117.0 High
- palo alto networks expeditionExpedition: Missing Authentication Leads to Admin Account TakeoverCVE-2024-5910In KEVPublic exploitEPSS 91.7%9.3 Critical
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the AgentCVE-2024-5909Public exploit6.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Encrypted Credential Exposure via Log FilesCVE-2024-59085.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Privilege Escalation (PE) VulnerabilityCVE-2024-59075.2 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2024-59064.8 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disrupt Functionality of the AgentCVE-2024-59052.0 Low
- ietf dhcp, cisco anyconnect vpn client, secure client +7 more +9 moreDHCP routing options can manipulate interface-based VPN trafficCVE-2024-3661Public exploitFix available7.6 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectCVE-2024-3400In KEVPublic exploitEPSS 100.0%10.0 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect SSL VPNCVE-2024-33884.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information DisclosureCVE-2024-33875.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Predefined Decryption Exclusions Does Not Work as IntendedCVE-2024-33865.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) when GTP Security is DisabledCVE-2024-33857.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsCVE-2024-33847.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)CVE-2024-33837.4 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted PacketsCVE-2024-33827.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability LossCVE-2024-24334.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2024-2432Public exploit4.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local User Can Disable GlobalProtectCVE-2024-24315.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationCVE-2024-00114.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect PortalCVE-2024-00104.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper IP Address Verification in GlobalProtect GatewayCVE-2024-00096.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfaceCVE-2024-00086.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfaceCVE-2024-00076.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: XML API Keys Revoked by Read-Only PAN-OS AdministratorCVE-2023-67932.7 Low
- Show moreLoading…