Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-2031PAN-OS: Integer underflow in the management interface
- CVE-2020-2030PAN-OS: OS command injection vulnerability in the management interface
- CVE-2020-1982PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services
- CVE-2020-2021PAN-OS: Authentication Bypass in SAML Authentication
- CVE-2020-2033GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie
- CVE-2020-2032GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade
- CVE-2020-2029PAN-OS: OS command injection vulnerability in management interface certificate generator
- CVE-2020-2028PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification
- CVE-2020-2027PAN-OS: Buffer overflow in authd authentication response
- CVE-2020-2018PAN-OS: Panorama authentication bypass vulnerability
- CVE-2020-2017PAN-OS: DOM-Based cross site scripting vulnerability in management web interface
- CVE-2020-2016PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation
- CVE-2020-2015PAN-OS: Buffer overflow in the management server
- CVE-2020-2014PAN-OS: OS injection vulnerability in PAN-OS management server
- CVE-2020-2013PAN-OS: Panorama context switch session cookie disclosure
- CVE-2020-2012PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak
- CVE-2020-2011PAN-OS: Panorama registration denial of service
- CVE-2020-2010PAN-OS: Authenticated user command injection vulnerability
- CVE-2020-2009PAN-OS: Panorama SD WAN arbitrary file creation
- CVE-2020-2008PAN-OS: OS command injection or arbitrary file deletion vulnerability
- CVE-2020-2007PAN-OS: OS command injection in management server
- CVE-2020-2006PAN-OS: Buffer overflow in management server payload parser
- CVE-2020-2005PAN-OS: GlobalProtect Clientless VPN session hijacking
- CVE-2020-2004GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs
- CVE-2020-2003PAN-OS: Authenticated administrator can delete arbitrary system file
- CVE-2020-2002PAN-OS: Spoofed Kerberos key distribution center authentication bypass
- CVE-2020-2001PAN-OS: Panorama External control of file vulnerability leads to privilege escalation
- CVE-2020-1998PAN-OS: Improper SAML SSO authorization of shared local users
- CVE-2020-1997PAN-OS: GlobalProtect registration open redirect
- CVE-2020-1996PAN-OS: Panorama management server log injection