Palo Alto PAN-OS vulnerabilities
The newest vulnerabilities affecting Palo Alto PAN-OS, up to 200. Subscribe by RSS.
- CVE-2026-0314GlobalProtect App: Local Denial of Service (DoS) on WindowsPalo Alto Networks GlobalProtect App
- CVE-2026-0315GlobalProtect App: Local Privilege Escalation Vulnerability on macOSPalo Alto Networks GlobalProtect App
- CVE-2026-0316PAN-OS: Stored Cross-Site Scripting (XSS) VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0317PAN-OS: Denial of Service VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0318PAN-OS: Denial of Service (DoS) on PanoramaPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0319PAN-OS: Improper Input Handling VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0320PAN-OS: Authenticated Admin Command Injection VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0321PAN-OS: Denial of Service (DoS) Vulnerabilities in Network ServicesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0307GlobalProtect App: Local Privilege Escalation VulnerabilitiesPalo Alto Networks GlobalProtect App
- CVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0309PAN-OS: Authenticated Command Injection in CLI with Luna HSM ConfigurationPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0310PAN-OS: Buffer Overflow Vulnerability via XML ProcessingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL FilteringPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0299GlobalProtect App: Local Privilege Escalation VulnerabilitiesPalo Alto Networks GlobalProtect App
- CVE-2026-0298GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)Palo Alto Networks GlobalProtect App
- CVE-2026-0297GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel HandshakePalo Alto Networks GlobalProtect App
- CVE-2026-0296GlobalProtect App: Improper Certificate Validation Bypass VulnerabilityPalo Alto Networks GlobalProtect App
- CVE-2026-0295GlobalProtect App: Local Privilege Escalation via Race Condition on macOSPalo Alto Networks GlobalProtect App
- CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) VulnerabilitiesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0280PAN-OS: IPv6 Firewall Policy BypassPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +2
- CVE-2026-0281PAN-OS: Information Disclosure Vulnerability in Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0282PAN-OS: File Deletion Vulnerability in Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0283PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0284PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0285PAN-OS: Server-Side Request Forgery Vulnerability in Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0286PAN-OS: Authenticated Command Injection in CLIPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic ProcessingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0273PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UIPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0272PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0269PAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +2
- CVE-2026-0267GlobalProtect App: Information Exposure Vulnerability on macOSPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2026-0266PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0249GlobalProtect App: Certificate Validation Bypass VulnerabilitiesPalo Alto Networks GlobalProtect App
- CVE-2026-0250GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or GatewayPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2026-0251GlobalProtect App: Local Privilege Escalation VulnerabilitiesPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2026-0256PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0258PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL FetchingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0261PAN-OS: Authenticated Admin Command Injection VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0262PAN-OS: Denial of Service Vulnerabilities in Network Traffic ParsingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0263PAN-OS: Remote Code Execution (RCE) in IKEv2 ProcessingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0264PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code ExecutionPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0265PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabledPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0300PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0229PAN-OS: Denial of Service in Advanced DNS Security FeaturePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0228PAN-OS: Improper Validation of Terminal Server Agent CertificatePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0227PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-4619PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted PacketsPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-4615PAN-OS: Improper Neutralization of Input in the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-4614PAN-OS: Session Token Disclosure VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-2183GlobalProtect App: Improper Certificate Validation Leads to Privilege EscalationPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-2182PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-2179GlobalProtect App: Non Admin User Can Disable the GlobalProtect AppPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-0141GlobalProtect App: Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-0140GlobalProtect App: Non Admin User Can Disable the GlobalProtect AppPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-4227GlobalProtect App: Interception in Endpoint Traffic Policy EnforcementPalo Alto Networks GlobalProtect App
- CVE-2025-4229PAN-OS: Traffic Information Disclosure VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-4230PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLIPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-4231PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-4232GlobalProtect: Authenticated Code Injection Through Wildcard on macOSPalo Alto Networks GlobalProtect App
- CVE-2025-0136PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devicesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0137PAN-OS: Improper Neutralization of Input in the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS
- CVE-2025-0135GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect AppPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-0133PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and PortalPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0130PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted PacketsPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0123PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet CapturesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0128PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0127PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-SeriesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0126PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML LoginPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0125PAN-OS: Improper Neutralization of Input in the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0124PAN-OS: Authenticated File Deletion Vulnerability on the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0120GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-0118GlobalProtect App: Execution of Unsafe ActiveX Control VulnerabilityPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-0117GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2025-0116PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP FramePalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2025-0115PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLIPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2025-0114PAN-OS: Denial of Service (DoS) in GlobalProtectPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2025-0110PAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig PluginPalo Alto Networks PAN-OS OpenConfig Plugin
- CVE-2025-0111PAN-OS: Authenticated File Read Vulnerability in the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0109PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0108PAN-OS: Authentication Bypass in the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-0107Expedition: OS Command Injection VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3
- CVE-2025-0106Expedition: Wildcard Expansion VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3
- CVE-2025-0105Expedition: Arbitrary File Deletion VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3
- CVE-2025-0104Expedition: Cross-Site Scripting (XSS) VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3
- CVE-2025-0103Expedition: SQL Injection VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3
- CVE-2024-3393PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS
- CVE-2024-5921GlobalProtect App: Insufficient Certificate Validation Leads to Privilege EscalationPalo Alto Networks GlobalProtect App
- CVE-2024-9474PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-0012PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-2550PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted PacketPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-5920PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate AdministratorPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-5917PAN-OS: Server-Side Request Forgery in WildFirePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS
- CVE-2024-2552PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-5918PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect UserPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-5919PAN-OS: Authenticated XML External Entities (XXE) Injection VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-2551PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-9472PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted TrafficPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-9473GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App
- CVE-2024-9471PAN-OS: Privilege Escalation (PE) Vulnerability in XML APIPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-9468PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-8691PAN-OS: User Impersonation in GlobalProtect PortalPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-8688PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-8687PAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesPalo Alto Networks PAN-OS · Palo Alto Networks GlobalPro… +2
- CVE-2024-8686PAN-OS: Command Injection VulnerabilityPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-5916PAN-OS: Cleartext Exposure of External System SecretsPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-5915GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App
- CVE-2024-5913PAN-OS: Improper Input Validation Vulnerability in PAN-OSPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-5911PAN-OS: File Upload Vulnerability in the Panorama Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-5908GlobalProtect App: Encrypted Credential Exposure via Log FilesPalo Alto Networks GlobalProtect App
- CVE-2024-3400PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-3388PAN-OS: User Impersonation in GlobalProtect SSL VPNPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-3387PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information DisclosurePalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-3386PAN-OS: Predefined Decryption Exclusions Does Not Work as IntendedPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-3385PAN-OS: Firewall Denial of Service (DoS) when GTP Security is DisabledPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-3384PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-3383PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-3382PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted PacketsPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-2433PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability LossPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-2432GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App
- CVE-2024-2431GlobalProtect App: Local User Can Disable GlobalProtectPalo Alto Networks GlobalProtect App
- CVE-2024-0011PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0010PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect PortalPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0009PAN-OS: Improper IP Address Verification in GlobalProtect GatewayPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0008PAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0007PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6793PAN-OS: XML API Keys Revoked by Read-Only PAN-OS AdministratorPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6791PAN-OS: Plaintext Disclosure of External System Integration CredentialsPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6789PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6795PAN-OS: OS Command Injection Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6794PAN-OS: File Upload Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6792PAN-OS: OS Command Injection Vulnerability in the XML APIPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6790PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-38046PAN-OS: Read System Files and Resources During Configuration CommitPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2023-0009GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App
- CVE-2023-0010PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2023-0008PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-0007PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-0006GlobalProtect App: Local File Deletion VulnerabilityPalo Alto Networks GlobalProtect app
- CVE-2023-0005PAN-OS: Exposure of Sensitive Information VulnerabilityPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-0004PAN-OS: Local File Deletion VulnerabilityPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2022-0030PAN-OS: Authentication Bypass in Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2022-0028PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2022-0024PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration CommitPalo Alto Networks PAN-OS
- CVE-2022-0023PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS ProxyPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2022-0022PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password HashesPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2022-0021GlobalProtect App: Information Exposure Vulnerability When Using Connect Before LogonPalo Alto Networks GlobalProtect App
- CVE-2022-0019GlobalProtect App: Insufficiently Protected Credentials Vulnerability on LinuxPalo Alto Networks GlobalProtect App
- CVE-2022-0018GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On EnabledPalo Alto Networks GlobalProtect App
- CVE-2022-0017GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege EscalationPalo Alto Networks GlobalProtect App
- CVE-2022-0016GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before LogonPalo Alto Networks GlobalProtect App
- CVE-2022-0011PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL FilteringPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3064PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway InterfacesPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3063PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway InterfacesPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3062PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect UsersPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3061PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3060PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3059PAN-OS: OS Command Injection Vulnerability When Performing Dynamic UpdatesPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3058PAN-OS: OS Command Injection Vulnerability in Web Interface XML APIPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3056PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML AuthenticationPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-3057GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or GatewayPalo Alto Networks GlobalProtect App
- CVE-2021-3055PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-3054PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityPalo Alto Networks PAN-OS
- CVE-2021-3053PAN-OS: Exceptional Condition Denial-of-Service (DoS)Palo Alto Networks PAN-OS
- CVE-2021-3052PAN-OS: Reflected Cross-Site Scripting (XSS) in Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-3050PAN-OS: OS Command Injection Vulnerability in Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-3048PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall OutagePalo Alto Networks PAN-OS
- CVE-2021-3047PAN-OS: Weak Cryptography Used in Web Interface AuthenticationPalo Alto Networks PAN-OS
- CVE-2021-3046PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect PortalPalo Alto Networks PAN-OS
- CVE-2021-3045PAN-OS: OS Command Argument Injection in Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-3038GlobalProtect App: Windows VPN kernel driver denial of service (DoS)Palo Alto Networks GlobalProtect App
- CVE-2021-3037PAN-OS: Secrets for scheduled configuration exports are logged in system logsPalo Alto Networks PAN-OS
- CVE-2021-3036PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectlyPalo Alto Networks PAN-OS
- CVE-2021-3032PAN-OS: Configuration secrets for log forwarding may be logged in system logsPalo Alto Networks PAN-OS
- CVE-2021-3031PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)Palo Alto Networks PAN-OS
- CVE-2020-2050PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verificationPalo Alto Networks PAN-OS
- CVE-2020-2048PAN-OS: System proxy passwords may be logged in clear text while viewing system statePalo Alto Networks PAN-OS
- CVE-2020-2022PAN-OS: Panorama session disclosure during context switch into managed devicePalo Alto Networks PAN-OS
- CVE-2020-2000PAN-OS: OS command injection and memory corruption vulnerabilityPalo Alto Networks PAN-OS
- CVE-2020-1999PAN-OS: Threat signatures are evaded by specifically crafted packetsPalo Alto Networks PAN-OS
- CVE-2020-2044PAN-OS: Passwords may be logged in clear text while storing operational command (op command) historyPalo Alto Networks PAN-OS
- CVE-2020-2043PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logsPalo Alto Networks PAN-OS
- CVE-2020-2042PAN-OS: Buffer overflow in the management web interfacePalo Alto Networks PAN-OS
- CVE-2020-2041PAN-OS: Management web interface denial-of-service (DoS)Palo Alto Networks PAN-OS
- CVE-2020-2040PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabledPalo Alto Networks PAN-OS
- CVE-2020-2039PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file uploadPalo Alto Networks PAN-OS
- CVE-2020-2038PAN-OS: OS command injection vulnerability in the management web interfacePalo Alto Networks PAN-OS
- CVE-2020-2037PAN-OS: OS command injection vulnerability in the management web interfacePalo Alto Networks PAN-OS
- CVE-2020-2036PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interfacePalo Alto Networks PAN-OS
- CVE-2020-2035PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessionsPalo Alto Networks PAN-OS
- CVE-2020-2034PAN-OS: OS command injection vulnerability in GlobalProtect portalPalo Alto Networks PAN-OS
- CVE-2020-2031PAN-OS: Integer underflow in the management interfacePalo Alto Networks PAN-OS
- CVE-2020-2030PAN-OS: OS command injection vulnerability in the management interfacePalo Alto Networks PAN-OS
- CVE-2020-1982PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered servicesPalo Alto Networks PAN-OS
- CVE-2020-2021PAN-OS: Authentication Bypass in SAML AuthenticationPalo Alto Networks PAN-OS
- CVE-2020-2033GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookiePalo Alto Networks GlobalProtect App
- CVE-2020-2032GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgradePalo Alto Networks GlobalProtect App
- CVE-2020-2029PAN-OS: OS command injection vulnerability in management interface certificate generatorPalo Alto Networks PAN-OS