Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-6795PAN-OS: OS Command Injection Vulnerability in the Web Interface
- CVE-2023-6794PAN-OS: File Upload Vulnerability in the Web Interface
- CVE-2023-6792PAN-OS: OS Command Injection Vulnerability in the XML API
- CVE-2023-6790PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2023-3282Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
- CVE-2023-3280Cortex XDR Agent: Local Windows User Can Disable the Agent
- CVE-2023-38046PAN-OS: Read System Files and Resources During Configuration Commit
- CVE-2023-0009GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- CVE-2023-0010PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication
- CVE-2023-0008PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface
- CVE-2023-0007PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface
- CVE-2023-0006GlobalProtect App: Local File Deletion Vulnerability
- CVE-2023-0005PAN-OS: Exposure of Sensitive Information Vulnerability
- CVE-2023-0004PAN-OS: Local File Deletion Vulnerability
- CVE-2023-0003Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
- CVE-2023-0002Cortex XDR Agent: Product Disruption by Local Windows User
- CVE-2023-0001Cortex XDR Agent: Cleartext Exposure of Agent Admin Password
- CVE-2022-0031Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
- CVE-2022-0030PAN-OS: Authentication Bypass in Web Interface
- CVE-2022-0029Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File
- CVE-2022-0028PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
- CVE-2022-0027Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports
- CVE-2022-0026Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability
- CVE-2022-0025Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability
- CVE-2022-0024PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit
- CVE-2022-0023PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy
- CVE-2022-0022PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes
- CVE-2022-0021GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon
- CVE-2022-0020Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface
- CVE-2022-0019GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux