Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-5915GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- CVE-2024-5914Cortex XSOAR: Command Injection in CommonScripts Pack
- CVE-2024-5913PAN-OS: Improper Input Validation Vulnerability in PAN-OS
- CVE-2024-5912Cortex XDR Agent: Improper File Signature Verification Checks
- CVE-2024-5911PAN-OS: File Upload Vulnerability in the Panorama Web Interface
- CVE-2024-5910Expedition: Missing Authentication Leads to Admin Account Takeover
- CVE-2024-5909Cortex XDR Agent: Local Windows User Can Disable the Agent
- CVE-2024-5908GlobalProtect App: Encrypted Credential Exposure via Log Files
- CVE-2024-5907Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
- CVE-2024-5906Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2024-5905Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent
- CVE-2024-3400PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
- CVE-2024-3388PAN-OS: User Impersonation in GlobalProtect SSL VPN
- CVE-2024-3387PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure
- CVE-2024-3386PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended
- CVE-2024-3385PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled
- CVE-2024-3384PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
- CVE-2024-3383PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
- CVE-2024-3382PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets
- CVE-2024-2433PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss
- CVE-2024-2432GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- CVE-2024-2431GlobalProtect App: Local User Can Disable GlobalProtect
- CVE-2024-0011PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication
- CVE-2024-0010PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal
- CVE-2024-0009PAN-OS: Improper IP Address Verification in GlobalProtect Gateway
- CVE-2024-0008PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface
- CVE-2024-0007PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface
- CVE-2023-6793PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator
- CVE-2023-6791PAN-OS: Plaintext Disclosure of External System Integration Credentials
- CVE-2023-6789PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface