Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-0103Expedition: SQL Injection Vulnerability
- CVE-2024-3393PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
- CVE-2024-5921GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation
- CVE-2024-9474PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
- CVE-2024-0012PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
- CVE-2024-2550PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet
- CVE-2024-5920PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator
- CVE-2024-5917PAN-OS: Server-Side Request Forgery in WildFire
- CVE-2024-2552PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)
- CVE-2024-5918PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User
- CVE-2024-5919PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability
- CVE-2024-2551PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
- CVE-2024-9472PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic
- CVE-2024-9473GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- CVE-2024-9471PAN-OS: Privilege Escalation (PE) Vulnerability in XML API
- CVE-2024-9470Cortex XSOAR: Information Disclosure Vulnerability
- CVE-2024-9469Cortex XDR Agent: Local Windows User Can Disable the Agent
- CVE-2024-9468PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet
- CVE-2024-9467Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure
- CVE-2024-9466Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure
- CVE-2024-9465Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
- CVE-2024-9464Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
- CVE-2024-9463Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
- CVE-2024-8691PAN-OS: User Impersonation in GlobalProtect Portal
- CVE-2024-8690Cortex XDR Agent: Local Windows Administrator Can Disable the Agent
- CVE-2024-8689ActiveMQ Content Pack: Cleartext Exposure of Credentials
- CVE-2024-8688PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)
- CVE-2024-8687PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
- CVE-2024-8686PAN-OS: Command Injection Vulnerability
- CVE-2024-5916PAN-OS: Cleartext Exposure of External System Secrets