Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1995PAN-OS: Management server rasmgr denial of service
- CVE-2020-1994PAN-OS: Predictable temporary file vulnerability
- CVE-2020-1993PAN-OS: GlobalProtect Portal PHP session fixation vulnerability
- CVE-2020-1992PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation
- CVE-2020-1991Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows
- CVE-2020-1990PAN-OS: Buffer overflow in the management server
- CVE-2020-1989Global Protect Agent: Incorrect privilege assignment allows local privilege escalation
- CVE-2020-1988Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability
- CVE-2020-1987Global Protect Agent: VPN cookie local information disclosure
- CVE-2020-1978VM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMs
- CVE-2020-1979PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation
- CVE-2020-1980PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands
- CVE-2020-1981PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation
- CVE-2020-1977Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.
- CVE-2020-1976GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.
- CVE-2020-1975Missing XML Validation in PAN-OS Web Interface
- CVE-2019-17440PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
- CVE-2019-17437PAN-OS: Custom-role users may escalate privileges
- CVE-2019-17435A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Wind
- CVE-2019-17436A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12
- CVE-2019-1581PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface
- CVE-2019-1578Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an
- CVE-2019-1577Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScrip
- CVE-2019-1568Cross-site scripting (XSS) vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow an unauthenticated attacker to run arbitrar
- CVE-2019-1574Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attac
- CVE-2019-1573Information Disclosure in GlobalProtect Agent
- CVE-2019-1572PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.
- CVE-2019-1566The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unau
- CVE-2019-1565The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attac
- CVE-2018-10143The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system