Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-0018GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled
- CVE-2022-0017GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation
- CVE-2022-0016GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon
- CVE-2022-0011PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering
- CVE-2022-0015Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability
- CVE-2022-0014Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session
- CVE-2022-0013Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File
- CVE-2022-0012Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability
- CVE-2021-3064PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces
- CVE-2021-3063PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces
- CVE-2021-3062PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users
- CVE-2021-3061PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)
- CVE-2021-3060PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)
- CVE-2021-3059PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates
- CVE-2021-3058PAN-OS: OS Command Injection Vulnerability in Web Interface XML API
- CVE-2021-3056PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication
- CVE-2021-3057GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway
- CVE-2021-3055PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface
- CVE-2021-3054PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability
- CVE-2021-3053PAN-OS: Exceptional Condition Denial-of-Service (DoS)
- CVE-2021-3052PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface
- CVE-2021-3051Cortex XSOAR: Authentication Bypass in SAML Authentication
- CVE-2021-3049Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability
- CVE-2021-3050PAN-OS: OS Command Injection Vulnerability in Web Interface
- CVE-2021-3048PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage
- CVE-2021-3047PAN-OS: Weak Cryptography Used in Web Interface Authentication
- CVE-2021-3046PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal
- CVE-2021-3045PAN-OS: OS Command Argument Injection in Web Interface
- CVE-2021-3043Prisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console
- CVE-2021-3042Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation