Palo Alto Networks PAN-OS
197 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-0316 | 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; … | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability | LOW 1.1 | 0.3 % | ||
| CVE-2026-0317 | 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; … | PAN-OS: Denial of Service Vulnerability | LOW 1.2 | 0.3 % | ||
| CVE-2026-0318 | 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; … | PAN-OS: Denial of Service (DoS) on Panorama | MEDIUM 4.6 | 0.3 % | ||
| CVE-2026-0319 | 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; … | PAN-OS: Improper Input Handling Vulnerability | MEDIUM 4.9 | 0.3 % | ||
| CVE-2026-0320 | 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; … | PAN-OS: Authenticated Admin Command Injection Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2026-0321 | 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; … | PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services | MEDIUM 6.6 | 0.3 % | ||
| CVE-2026-0322 | 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; … | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface | HIGH 8.6 | 1.7 % | KEV | |
| CVE-2026-0308 | 12.1.0 – < 12.1.10 ; 11.2.0 – < 11.2.13-h2 ; 11.1.0 – < 11.1.16-h2 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | LOW 1.1 | 0.5 % | ||
| CVE-2026-0309 | 12.2.0 – < 12.2.3 ; 12.1.0 – < 12.1.4-h10 ; 11.2.0 – < 11.2.4-h21 ; … | PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration | MEDIUM 4.0 | 0.8 % | ||
| CVE-2026-0310 | 12.2.0 – < 12.2.3 ; 12.1.0 – < 12.1.4-h10 ; 11.2.0 – < 11.2.4-h21 ; … | PAN-OS: Buffer Overflow Vulnerability via XML Processing | HIGH 7.2 | 0.7 % | ||
| CVE-2026-0301 | 11.1.0 – < 11.1.16-h1 ; 10.2.0 – < 10.2.8 | PAN-OS: Information Disclosure Vulnerability in URL Filtering | LOW 1.7 | 0.6 % | ||
| CVE-2026-0279 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities | LOW 1.3 | 0.8 % | ||
| CVE-2026-0280 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: IPv6 Firewall Policy Bypass | LOW 1.7 | 0.3 % | ||
| CVE-2026-0281 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: Information Disclosure Vulnerability in Management Web Interface | LOW 2.1 | 0.3 % | ||
| CVE-2026-0282 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: File Deletion Vulnerability in Management Web Interface | LOW 2.7 | 0.3 % | ||
| CVE-2026-0283 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) | MEDIUM 4.5 | 0.4 % | ||
| CVE-2026-0284 | 12.1.0 – < 12.1.4-h8 ; 11.2.0 – < 11.2.4-h20 ; 11.1.0 – < 11.1.4-h35 ; … | PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) | MEDIUM 4.7 | 0.5 % | ||
| CVE-2026-0285 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface | MEDIUM 4.7 | 0.4 % | ||
| CVE-2026-0286 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: Authenticated Command Injection in CLI | MEDIUM 6.0 | 1.7 % | ||
| CVE-2026-0287 | 12.1.0 – < 12.1.4-h8 ; 11.2.0 – < 11.2.4-h20 ; 11.1.0 – < 11.1.4-h35 ; … | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing | MEDIUM 6.6 | 0.6 % | ||
| CVE-2026-0288 | 12.1.0 – < 12.1.8 ; 11.2.0 – < 11.2.13 ; 11.1.0 – < 11.1.16 ; … | PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent | HIGH 7.2 | 0.8 % | ||
| CVE-2026-0273 | 12.1.0 – < 12.1.4-h7 ; 11.2.0 – < 11.2.4-h18 ; 11.1.0 – < 11.1.4-h34 ; … | PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI | MEDIUM 6.1 | 1.3 % | ||
| CVE-2026-0272 | 12.1.0 – < 12.1.4-h7 ; 11.2.0 – < 11.2.4-h18 ; 11.1.0 – < 11.1.4-h34 ; … | PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) | MEDIUM 6.0 | 0.3 % | ||
| CVE-2026-0269 | 12.1.0 – < 12.1.5 ; 11.2.0 – < 11.2.10 ; 11.1.0 – < 11.1.6-h21 ; … | PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing | MEDIUM 4.6 | 0.2 % | ||
| CVE-2026-0266 | 12.1.0 – < 12.1.5 ; 11.2.0 – < 11.2.11 ; 11.1.0 – < 11.1.14 ; … | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | LOW 1.1 | 0.1 % | ||
| CVE-2026-0256 | 12.1.0 – < 12.1.7 ; 11.2.0 – < 11.2.12 ; 11.1.0 – < 11.1.15 ; … | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-0257 | 12.1.0 – < 12.1.7, 12.1.4-h6 ; 11.2.0 – < 11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17 ; 11.1.0 – < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 ; … | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities | HIGH 7.8 | 95 % | KEV | |
| CVE-2026-0258 | 12.1.0 – < 12.1.7, 12.1.4-h5 ; 11.2.0 – < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17 ; 11.1.0 – < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 ; … | PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-0261 | 12.1.0 – < 12.1.7, 12.1.4-h5 ; 11.2.0 – < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17 ; 11.1.0 – < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 ; … | PAN-OS: Authenticated Admin Command Injection Vulnerability | MEDIUM 6.1 | 1.4 % | ||
| CVE-2026-0262 | 12.1.0 – < 12.1.7, 12.1.4-h5 ; 11.2.0 – < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17 ; 11.1.0 – < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 ; … | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing | MEDIUM 6.6 | 0.4 % | ||
| CVE-2026-0263 | 12.1.0 – < 12.1.7, 12.1.4-h5 ; 11.2.0 – < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17 ; 11.1.0 – < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 | PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing | HIGH 7.2 | 0.4 % | ||
| CVE-2026-0264 | 12.1.0 – < 12.1.7, 12.1.4-h5 ; 11.2.0 – < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17 ; 11.1.0 – < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 ; … | PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution | HIGH 7.2 | 0.5 % | ||
| CVE-2026-0265 | 12.1.0 – < 12.1.7, 12.1.4-h5 ; 11.2.0 – < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17 ; 11.1.0 – < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 ; … | PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled | HIGH 7.2 | 1.1 % | ||
| CVE-2026-0300 | 12.1.0 – < 12.1.7 ; 11.2.0 – < 11.2.12 ; 11.1.0 – < 11.1.15 ; … | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal | CRITICAL 9.3 | 42 % | KEV | |
| CVE-2026-0229 | 12.1.0 – < 12.1.4 ; 11.2.0 – < 11.2.10 | PAN-OS: Denial of Service in Advanced DNS Security Feature | MEDIUM 6.6 | 0.6 % | ||
| CVE-2026-0228 | 11.2.0 – < 11.2.8 ; 11.1.0 – < 11.1.11 ; 10.2.0 – < 10.2.17 | PAN-OS: Improper Validation of Terminal Server Agent Certificate | LOW 1.3 | 0.2 % | ||
| CVE-2026-0227 | 12.1.2 – < 12.1.4, 12.1.3-h3 ; 11.2.0 – < 11.2.10-h2, 11.2.7-h8, 11.2.4-h15 ; 11.1.0 – < 11.1.13, 11.1.10-h9, 11.1.6-h23, 11.1.4-h27 ; … | PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal | MEDIUM 6.6 | 0.7 % | ||
| CVE-2025-4619 | 11.2.0 – < 11.2.5 ; 11.1.0 – < 11.1.7 ; 10.2.0 – < 10.2.14 | PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets | MEDIUM 6.6 | 0.6 % | ||
| CVE-2025-4615 | 11.2.0 – < 11.2.8 ; 11.1.0 – < 11.1.4-h27 ; 10.2.0 – < 10.2.17 | PAN-OS: Improper Neutralization of Input in the Management Web Interface | MEDIUM 5.5 | 0.8 % | ||
| CVE-2025-4614 | 11.2.0 – < 11.2.8 ; 11.1.0 – < 11.1.12 ; 10.2.0 – < 10.2.17 | PAN-OS: Session Token Disclosure Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2182 | 11.2.0 – < 11.2.8 ; 11.1.0 – < 11.1.10 | PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK) | MEDIUM 5.6 | 0.1 % | ||
| CVE-2025-4229 | 11.2.0 – < 11.2.7 ; 11.1.0 – < 11.1.10 ; 10.2.0 – < 10.2.17 ; … | PAN-OS: Traffic Information Disclosure Vulnerability | MEDIUM 6.0 | 0.5 % | ||
| CVE-2025-4230 | 11.2.0 – < 11.2.6 ; 11.1.0 – < 11.1.10 ; 10.2.0 – < 10.2.14 ; … | PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI | HIGH 8.4 | 0.6 % | ||
| CVE-2025-4231 | 11.0.0 – < 11.0.3 ; 10.2.0 – < 10.2.8 ; 10.1.0 | PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface | HIGH 8.6 | 1.0 % | ||
| CVE-2025-0136 | 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.7 ; 10.2.0 – < 10.2.11 ; … | PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices | MEDIUM 5.3 | 0.2 % | ||
| CVE-2025-0137 | 11.2.0 – < 11.2.5 ; 11.1.0 – < 11.1.8 ; 10.2.0 – < 10.2.13 ; … | PAN-OS: Improper Neutralization of Input in the Management Web Interface | MEDIUM 4.8 | 0.4 % | ||
| CVE-2025-0133 | 11.2.0 – < 11.2.7 ; 11.1.0 – < 11.1.6-h14 ; 10.2.0 – < 10.2.16-h1 ; … | PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal | LOW 2.7 | 46 % | ||
| CVE-2025-0130 | 11.2.0 – < 11.2.5 ; 11.1.0 – < 11.1.6-h1 | PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets | HIGH 8.2 | 0.4 % | ||
| CVE-2025-0123 | 11.2.0 – < 11.2.6 ; 11.1.0 – < 11.1.8 ; 10.2.0 – < 10.2.15 ; … | PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet Captures | MEDIUM 5.9 | 0.1 % | ||
| CVE-2025-0128 | 11.2.0 – < 11.2.3 ; 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.6 ; … | PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet | HIGH 8.7 | 0.3 % | ||
| CVE-2025-0127 | 11.0.0 – < 11.0.4 ; 10.2.0 – < 10.2.9 ; 10.1.0 – < 10.1.14-h13 | PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series | HIGH 7.1 | 0.6 % | ||
| CVE-2025-0126 | 11.2.0 – < 11.2.3 ; 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.6 ; … | PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login | HIGH 8.3 | 0.4 % | ||
| CVE-2025-0125 | 11.2.0 – < 11.2.5 ; 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.6 ; … | PAN-OS: Improper Neutralization of Input in the Management Web Interface | MEDIUM 6.9 | 0.4 % | ||
| CVE-2025-0124 | 11.2.0 – < 11.2.1 ; 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.6 ; … | PAN-OS: Authenticated File Deletion Vulnerability on the Management Web Interface | MEDIUM 5.1 | 0.4 % | ||
| CVE-2025-0116 | 11.2.0 – < 11.2.5 ; 11.1.0 – < 11.1.8 ; 10.2.0 – < 10.2.14 ; … | PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-0115 | 11.2.0 – < 11.2.3 ; 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.6 ; … | PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-0114 | 11.0.0 – < 11.0.2 ; 10.2.0 – < 10.2.5 ; 10.1.0 – < 10.1.14-h11 | PAN-OS: Denial of Service (DoS) in GlobalProtect | HIGH 8.2 | 0.4 % | ||
| CVE-2025-0111 | 10.1.0 – < 10.1.14-h9 ; 10.2.0 – < 10.2.7-h24 ; 11.1.0 – < 11.1.6-h1 ; … | PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface | HIGH 7.1 | 2.0 % | KEV | |
| CVE-2025-0109 | 10.1.0 – < 10.1.14-h9 ; 10.2.0 – < 10.2.7-h24 ; 11.1.0 – < 11.1.6-h1 ; … | PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface | MEDIUM 6.9 | 0.6 % | ||
| CVE-2025-0108 | 10.1.0 – < 10.1.14-h9 ; 10.2.0 – < 10.2.7-h24 ; 11.1.0 – < 11.1.6-h1 ; … | PAN-OS: Authentication Bypass in the Management Web Interface | HIGH 8.8 | 98 % | KEV | |
| CVE-2025-0107 | | Expedition: OS Command Injection Vulnerability | HIGH 7.7 | 78 % | ||
| CVE-2025-0106 | | Expedition: Wildcard Expansion Vulnerability | MEDIUM 6.9 | 0.5 % | ||
| CVE-2025-0105 | | Expedition: Arbitrary File Deletion Vulnerability | MEDIUM 6.9 | 13 % | ||
| CVE-2025-0104 | | Expedition: Cross-Site Scripting (XSS) Vulnerability | HIGH 7.0 | 0.4 % | ||
| CVE-2025-0103 | | Expedition: SQL Injection Vulnerability | CRITICAL 9.2 | 0.6 % | ||
| CVE-2024-3393 | 11.2.0 – < 11.2.3 ; 11.1.0 – < 11.1.2-h16 ; 10.2.8 – < 10.2.8-h19 ; … | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet | HIGH 8.7 | 29 % | KEV | |
| CVE-2024-9474 | 11.2.0 – < 11.2.4-h1 ; 11.1.0 – < 11.1.5-h1 ; 11.0.0 – < 11.0.6-h1 ; … | PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface | MEDIUM 6.9 | 94 % | KEV | |
| CVE-2024-0012 | 11.2.0 – < 11.2.4-h1 ; 11.1.0 – < 11.1.5-h1 ; 11.0.0 – < 11.0.6-h1 ; … | PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) | CRITICAL 9.3 | 100 % | KEV | |
| CVE-2024-2550 | 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.6 ; 10.2.0 – < 10.2.11 | PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet | HIGH 8.7 | 0.5 % | ||
| CVE-2024-5920 | 11.1.0 – < 11.1.4 ; 11.0.0 – < 11.0.6 ; 10.2.0 – < 10.2.7-h24 ; … | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator | MEDIUM 4.6 | 0.3 % | ||
| CVE-2024-5917 | 10.2.0 – < 10.2.2 ; 10.1.0 – < 10.1.7 | PAN-OS: Server-Side Request Forgery in WildFire | LOW 2.1 | 0.5 % | ||
| CVE-2024-2552 | 11.2.0 – < 11.2.4 ; 11.1.0 – < 11.1.5 ; 11.0.0 – < 11.0.6 ; … | PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI) | MEDIUM 6.8 | 0.5 % | ||
| CVE-2024-5918 | 11.0.0 – < 11.0.3 ; 10.2.0 – < 10.2.4-h5 ; 10.1.0 – < 10.1.11 | PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User | MEDIUM 5.3 | 0.2 % | ||
| CVE-2024-5919 | 11.0.0 – < 11.0.2 ; 10.2.0 – < 10.2.5 ; 10.1.0 – < 10.1.10 | PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability | MEDIUM 5.1 | 0.3 % | ||
| CVE-2024-2551 | 11.0.0 – < 11.0.5 ; 10.2.0 – < 10.2.4-h6 ; 10.1.0 – < 10.1.14 | PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet | HIGH 8.7 | 0.5 % | ||
| CVE-2024-9472 | 11.2.2 – < 11.2.2-h3 ; 11.1.2-h9 – < 11.1.2-h14 ; 10.2.7-h12 – < 10.2.7-h16 | PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic | HIGH 8.7 | 0.4 % | ||
| CVE-2024-9471 | 11.0.0 – < 11.0.3 ; 10.1.0 – < 10.1.11 ; 10.2.0 – < 10.2.8 ; … | PAN-OS: Privilege Escalation (PE) Vulnerability in XML API | MEDIUM 5.1 | 0.3 % | ||
| CVE-2024-9468 | 11.1.0 – < 11.1.3 ; 11.0.0 – < 11.0.4-h5 ; 10.2.0 – < 10.2.4-h24 | PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet | HIGH 8.2 | 0.4 % | ||
| CVE-2024-8691 | 9.1.0 – < 9.1.17 ; 10.1.0 – < 10.1.11 | PAN-OS: User Impersonation in GlobalProtect Portal | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-8688 | 9.1.0 – < 9.1.15 ; 10.0.0 – < 10.0.10 ; 10.1.0 – < 10.1.1 | PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) | MEDIUM 6.7 | 0.2 % | ||
| CVE-2024-8687 | 11.0.0 – < 11.0.1 ; 10.2.0 – < 10.2.4 ; 10.1.0 – < 10.1.9 ; … | PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes | MEDIUM 6.9 | 0.4 % | ||
| CVE-2024-8686 | 11.2.2 | PAN-OS: Command Injection Vulnerability | HIGH 8.6 | 1.4 % | ||
| CVE-2024-5916 | 10.2 – < 10.2.8 ; 11.0 – < 11.0.4 | PAN-OS: Cleartext Exposure of External System Secrets | MEDIUM 6.0 | 0.2 % | ||
| CVE-2024-5913 | 10.1.0 – < 10.1.14-h2 ; 10.2.0 – < 10.2.10 ; 11.0.0 – < 11.0.5 ; … | PAN-OS: Improper Input Validation Vulnerability in PAN-OS | MEDIUM 6.8 | 0.2 % | ||
| CVE-2024-5911 | 10.2.0 – < 10.2.4 ; 10.1.0 – < 10.1.9 | PAN-OS: File Upload Vulnerability in the Panorama Web Interface | HIGH 7.0 | 0.6 % | ||
| CVE-2024-3400 | 10.2.0 – < 10.2.9-h1 ; 11.0.0 – < 11.0.4-h1 ; 11.1.0 – < 11.1.2-h3 | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2024-3388 | 8.1.0 – < 8.1.26 ; 9.0.0 – < 9.0.17-h4 ; 9.1.0 – < 9.1.17 ; … | PAN-OS: User Impersonation in GlobalProtect SSL VPN | MEDIUM 5.0 | 0.3 % | ||
| CVE-2024-3387 | 10.1.0 – < 10.1.12 ; 10.2.0 – < 10.2.7-h3 ; 10.2.0 – < 10.2.8 ; … | PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure | MEDIUM 5.9 | 0.2 % | ||
| CVE-2024-3386 | 9.0.0 – < 9.0.17-h2 ; 9.1.0 – < 9.1.17 ; 10.0.0 – < 10.0.13 ; … | PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended | MEDIUM 5.3 | 0.4 % | ||
| CVE-2024-3385 | 9.0.0 – < 9.0.17-h4 ; 9.1.0 – < 9.1.17 ; 10.1.0 – < 10.1.12 ; … | PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled | HIGH 7.5 | 0.9 % | ||
| CVE-2024-3384 | 8.1.0 – < 8.1.24 ; 9.0.0 – < 9.0.17 ; 9.1.0 – < 9.1.15-h1 ; … | PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets | HIGH 7.5 | 0.9 % | ||
| CVE-2024-3383 | 11.0.0 – < 11.0.3 ; 10.2.0 – < 10.2.5 ; 10.1.0 – < 10.1.11 | PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE) | CRITICAL 9.1 | 0.6 % | ||
| CVE-2024-3382 | 10.2.0 – < 10.2.7-h3 ; 11.0.0 – < 11.0.4 ; 11.1.0 – < 11.1.2 | PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets | HIGH 7.5 | 0.9 % | ||
| CVE-2024-2433 | 9.0 – < 9.0.17-h4 ; 9.1 – < 9.1.17 ; 10.1 – < 10.1.12 ; … | PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss | MEDIUM 4.3 | 0.6 % | ||
| CVE-2024-0011 | 8.1 – < 8.1.24 ; 9.0 – < 9.0.17 ; 9.1 – < 9.1.13 ; … | PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication | MEDIUM 6.1 | 0.4 % | ||
| CVE-2024-0010 | 9.0 – < 9.0.17-h4 ; 9.1 – < 9.1.17 ; 10.1 – < 10.1.11-h1 ; … | PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-0009 | 10.2 – < 10.2.4 ; 11.0 – < 11.0.1 | PAN-OS: Improper IP Address Verification in GlobalProtect Gateway | MEDIUM 6.3 | 0.2 % | ||
| CVE-2024-0008 | 9.0 – < 9.0.17-h2 ; 9.0 – < 9.0.18 ; 9.1 – < 9.1.17 ; … | PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface | HIGH 8.8 | 0.5 % | ||
| CVE-2024-0007 | 8.1 – < 8.1.24-h1 ; 8.1 – < 8.1.25 ; 9.0 – < 9.0.17 ; … | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface | MEDIUM 6.8 | 0.4 % | ||
| CVE-2023-6793 | 9.0 – < 9.0.17-h4 ; 9.1 – < 9.1.17 ; 10.0 – All ; … | PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator | LOW 2.7 | 0.6 % | ||
| CVE-2023-6791 | 8.1 – < 8.1.24-h1 ; 9.0 – < 9.0.17 ; 9.1 – < 9.1.16 ; … | PAN-OS: Plaintext Disclosure of External System Integration Credentials | MEDIUM 4.9 | 0.6 % | ||
| CVE-2023-6789 | 8.1 – < 8.1.26 ; 9.0 – < 9.0.17-h4 ; 9.1 – < 9.1.17 ; … | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | MEDIUM 4.8 | 0.4 % | ||
| CVE-2023-6795 | 8.1 – < 8.1.24-h1 ; 9.0 – < 9.0.17 ; 9.1 – < 9.1.12 ; … | PAN-OS: OS Command Injection Vulnerability in the Web Interface | MEDIUM 5.5 | 1.1 % | ||
| CVE-2023-6794 | 8.1 – < 8.1.26 ; 9.0 – < 9.0.17-h1 ; 9.1 – < 9.1.14 | PAN-OS: File Upload Vulnerability in the Web Interface | MEDIUM 5.5 | 0.6 % | ||
| CVE-2023-6792 | 8.1 – < 8.1.24 ; 9.0 – < 9.0.17 ; 9.1 – < 9.1.15 ; … | PAN-OS: OS Command Injection Vulnerability in the XML API | MEDIUM 6.3 | 1.1 % | ||
| CVE-2023-6790 | 8.1 – < 8.1.25 ; 9.0 – < 9.0.17 ; 9.1 – < 9.1.16 ; … | PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface | HIGH 8.8 | 0.7 % | ||
| CVE-2023-38046 | 11.0 – < 11.0.1 ; 10.2 – < 10.2.4 | PAN-OS: Read System Files and Resources During Configuration Commit | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-0010 | 10.2 – < 10.2.2 ; 10.1 – < 10.1.6 ; 10.0 – < 10.0.11 ; … | PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-0008 | 8.1 – < 8.1.25 ; 9.0 – < 9.0.17 ; 9.1 – < 9.1.16 ; … | PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface | MEDIUM 4.4 | 0.5 % | ||
| CVE-2023-0007 | 10.0 – < 10.0.7 ; 9.1 – < 9.1.16 ; 9.0 – < 9.0.17 ; … | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-0005 | 10.2 – < 10.2.3 ; 10.1 – < 10.1.8 ; 10.0 – < 10.0.12 ; … | PAN-OS: Exposure of Sensitive Information Vulnerability | MEDIUM 4.9 | 0.3 % | ||
| CVE-2023-0004 | 8.1 – < 8.1.24 ; 9.0 – < 9.0.17 ; 9.1 – < 9.1.15 ; … | PAN-OS: Local File Deletion Vulnerability | MEDIUM 6.5 | 1.1 % | ||
| CVE-2022-0030 | 8.1 – < 8.1.24 | PAN-OS: Authentication Bypass in Web Interface | HIGH 8.1 | 0.9 % | ||
| CVE-2022-0028 | 8.1 – < 8.1.23-h1 ; 9.0 – < 9.0.16-h3 ; 9.1 – < 9.1.14-h4 ; … | PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering | HIGH 8.6 | 2.7 % | KEV | |
| CVE-2022-0024 | 9.1 – < 9.1.13 ; 10.1 – < 10.1.5 ; 9.0 – < 9.0.16 ; … | PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit | HIGH 7.2 | 1.6 % | ||
| CVE-2022-0023 | 8.1 – < 8.1.22 ; 9.1 – < 9.1.13 ; 10.1 – < 10.1.5 ; … | PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy | MEDIUM 5.9 | 0.7 % | ||
| CVE-2022-0022 | 9.0.* ; 9.1 – < 9.1.11 ; 8.1 – < 8.1.21 ; … | PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes | MEDIUM 4.4 | 0.1 % | ||
| CVE-2022-0011 | 9.0.* ; 8.1 – < 8.1.21 ; 9.1 – < 9.1.12 ; … | PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering | MEDIUM 6.5 | 0.7 % | ||
| CVE-2021-3064 | 8.1 – < 8.1.17 | PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces | CRITICAL 9.8 | 20 % | ||
| CVE-2021-3063 | 8.1 – < 8.1.21 ; 9.0 – < 9.0.14-h4 ; 10.0 – < 10.0.8-h4 ; … | PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces | HIGH 7.5 | 0.9 % | ||
| CVE-2021-3062 | 9.1 – < 9.1.11 ; 8.1 – < 8.1.20 ; 9.0 – < 9.0.14 ; … | PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users | HIGH 8.8 | 0.7 % | ||
| CVE-2021-3061 | 8.1 – < 8.1.20-h1 ; 9.0 – < 9.0.14-h3 ; 10.0 – < 10.0.8 ; … | PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) | HIGH 7.2 | 0.9 % | ||
| CVE-2021-3060 | 8.1 – < 8.1.20-h1 ; 9.0 – < 9.0.14-h3 ; 9.1 – < 9.1.11-h2 ; … | PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) | HIGH 8.1 | 33 % | ||
| CVE-2021-3059 | 10.0 – < 10.0.8 ; 10.1 – < 10.1.3 ; 8.1 – < 8.1.20-h1 ; … | PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates | HIGH 8.1 | 1.5 % | ||
| CVE-2021-3058 | 10.1 – < 10.1.3 ; 9.0 – < 9.0.14-h3 ; 8.1 – < 8.1.20-h1 ; … | PAN-OS: OS Command Injection Vulnerability in Web Interface XML API | HIGH 8.8 | 1.6 % | ||
| CVE-2021-3056 | 9.0 – < 9.0.14 ; 8.1 – < 8.1.20 ; 9.1 – < 9.1.9 ; … | PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication | HIGH 8.8 | 1.5 % | ||
| CVE-2021-3055 | 9.0 – < 9.0.14 ; 9.1 – < 9.1.10 ; 10.0 – < 10.0.6 ; … | PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface | MEDIUM 6.5 | 1.1 % | ||
| CVE-2021-3054 | 8.1 – < 8.1.20 ; 9.0 – < 9.0.14 ; 10.0 – < 10.0.7 ; … | PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability | HIGH 7.2 | 0.9 % | ||
| CVE-2021-3053 | 8.1 – < 8.1.20 ; 9.0 – < 9.0.14 ; 9.1 – < 9.1.9 ; … | PAN-OS: Exceptional Condition Denial-of-Service (DoS) | HIGH 7.5 | 1.0 % | ||
| CVE-2021-3052 | 9.0 – < 9.0.14 ; 8.1 – < 8.1.20 ; 9.1 – < 9.1.10 ; … | PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface | HIGH 8.0 | 0.6 % | ||
| CVE-2021-3050 | 9.0.10 – < 9.0* ; 9.1.4 – < 9.1* ; 10.0.0 – < 10.0* ; … | PAN-OS: OS Command Injection Vulnerability in Web Interface | HIGH 8.8 | 1.8 % | ||
| CVE-2021-3048 | 9.0 – < 9.0.14 ; 9.1 – < 9.1.9 ; 10.0 – < 10.0.5 | PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage | MEDIUM 5.9 | 0.8 % | ||
| CVE-2021-3047 | 8.1 – < 8.1.19 ; 9.0 – < 9.0.14 ; 10.0 – < 10.0.4 ; … | PAN-OS: Weak Cryptography Used in Web Interface Authentication | MEDIUM 4.2 | 0.5 % | ||
| CVE-2021-3046 | 8.1 – < 8.1.19 ; 9.0 – < 9.0.14 ; 9.1 – < 9.1.9 ; … | PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal | MEDIUM 6.8 | 1.1 % | ||
| CVE-2021-3045 | 8.1 – < 8.1.19 ; 9.0 – < 9.0.14 ; 9.1 – < 9.1.10 | PAN-OS: OS Command Argument Injection in Web Interface | MEDIUM 4.9 | 0.8 % | ||
| CVE-2021-3037 | 8.1 – < 8.1.19 ; 9.0 – < 9.0.13 ; 9.1 – < 9.1.4 | PAN-OS: Secrets for scheduled configuration exports are logged in system logs | LOW 2.3 | 0.3 % | ||
| CVE-2021-3036 | 8.1 – < 8.1.19 ; 9.0 – < 9.0.12 ; 9.1 – < 9.1.6 ; … | PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-3032 | 8.1 – < 8.1.18 ; 9.0 – < 9.0.12 ; 9.1 – < 9.1.4 ; … | PAN-OS: Configuration secrets for log forwarding may be logged in system logs | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-3031 | 8.1 – < 8.1.18 ; 9.0 – < 9.0.12 ; 9.1 – < 9.1.5 | PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) | MEDIUM 4.3 | 0.5 % | ||
| CVE-2020-2050 | 8.1 – < 8.1.17 ; 9.0 – < 9.0.11 ; 9.1 – < 9.1.5 ; … | PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification | HIGH 8.2 | 1.0 % | ||
| CVE-2020-2048 | 8.1 – < 8.1.17 ; 9.0 – < 9.0.11 ; 9.1 – < 9.1.2 | PAN-OS: System proxy passwords may be logged in clear text while viewing system state | LOW 3.3 | 0.3 % | ||
| CVE-2020-2022 | 8.1 – < 8.1.17 ; 9.0 – < 9.0.11 ; 9.1 – < 9.1.5 | PAN-OS: Panorama session disclosure during context switch into managed device | HIGH 7.5 | 1.2 % | ||
| CVE-2020-2000 | 8.1 – < 8.1.16 ; 9.0 – < 9.0.10 ; 9.1 – < 9.1.4 ; … | PAN-OS: OS command injection and memory corruption vulnerability | HIGH 7.2 | 3.4 % | ||
| CVE-2020-1999 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.17 ; … | PAN-OS: Threat signatures are evaded by specifically crafted packets | MEDIUM 5.3 | 1.3 % | ||
| CVE-2020-2044 | 8.0.* ; 8.1 – < 8.1.16 ; 9.0 – < 9.0.10 ; … | PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history | LOW 3.3 | 0.7 % | ||
| CVE-2020-2043 | 8.1 – < 8.1.16 ; 9.0 – < 9.0.10 ; 9.1 – < 9.1.4 | PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs | LOW 3.3 | 0.7 % | ||
| CVE-2020-2042 | 10.0 – < 10.0.1 | PAN-OS: Buffer overflow in the management web interface | HIGH 7.2 | 2.3 % | ||
| CVE-2020-2041 | 8.0.* ; 8.1 – < 8.1.16 | PAN-OS: Management web interface denial-of-service (DoS) | HIGH 7.5 | 2.1 % | ||
| CVE-2020-2040 | 8.0.* ; 9.0 – < 9.0.9 ; 9.1 – < 9.1.3 ; … | PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled | CRITICAL 9.8 | 3.9 % | ||
| CVE-2020-2039 | 9.1 – < 9.1.4 ; 8.1 – < 8.1.16 ; 9.0 – < 9.0.10 ; … | PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload | MEDIUM 5.3 | 46 % | ||
| CVE-2020-2038 | 10.0 – < 10.0.1 ; 9.0 – < 9.0.10 ; 9.1 – < 9.1.4 | PAN-OS: OS command injection vulnerability in the management web interface | HIGH 7.2 | 86 % | ||
| CVE-2020-2037 | 8.1 – < 8.1.16 ; 9.0 – < 9.0.10 ; 9.1 – < 9.1.3 | PAN-OS: OS command injection vulnerability in the management web interface | HIGH 7.2 | 3.6 % | ||
| CVE-2020-2036 | 9.0 – < 9.0.9 ; 8.1 – < 8.1.16 | PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface | HIGH 8.8 | 24 % | ||
| CVE-2020-2035 | 8.1.* ; 9.0.* ; 9.1.* ; … | PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions | LOW 3.0 | 0.8 % | ||
| CVE-2020-2034 | 8.0.* ; 7.1.* ; 9.1 – < 9.1.3 ; … | PAN-OS: OS command injection vulnerability in GlobalProtect portal | HIGH 8.1 | 7.2 % | ||
| CVE-2020-2031 | 9.1 – < 9.1.3 | PAN-OS: Integer underflow in the management interface | MEDIUM 4.9 | 1.1 % | ||
| CVE-2020-2030 | 8.0.* ; 7.1.* ; 8.1 – < 8.1.15 | PAN-OS: OS command injection vulnerability in the management interface | HIGH 7.2 | 2.5 % | ||
| CVE-2020-1982 | 8.0.* ; 9.1 – < 9.1.3 ; 9.0 – < 9.0.9 ; … | PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services | MEDIUM 4.8 | 0.4 % | ||
| CVE-2020-2021 | 8.0.* ; 8.1 – < 8.1.15 ; 9.0 – < 9.0.9 ; … | PAN-OS: Authentication Bypass in SAML Authentication | CRITICAL 10.0 | 4.4 % | KEV | |
| CVE-2020-2029 | 8.0.* ; 7.1 – < 7.1.26 ; 8.1 – < 8.1.13 | PAN-OS: OS command injection vulnerability in management interface certificate generator | HIGH 7.2 | 1.8 % | ||
| CVE-2020-2028 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.13 ; … | PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification | HIGH 7.2 | 1.8 % | ||
| CVE-2020-2027 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.13 ; … | PAN-OS: Buffer overflow in authd authentication response | HIGH 7.2 | 2.1 % | ||
| CVE-2020-2018 | 8.0.* ; 7.1 – < 7.1.26 ; 8.1 – < 8.1.12 ; … | PAN-OS: Panorama authentication bypass vulnerability | CRITICAL 9.0 | 1.4 % | ||
| CVE-2020-2017 | 8.0.* ; 7.1 – < 7.1.26 ; 8.1 – < 8.1.13 ; … | PAN-OS: DOM-Based cross site scripting vulnerability in management web interface | HIGH 8.8 | 0.8 % | ||
| CVE-2020-2016 | 8.0.* ; 7.1 – < 7.1.26 ; 8.1 – < 8.1.13 ; … | PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation | HIGH 7.0 | 0.6 % | ||
| CVE-2020-2015 | 8.0.* ; 9.0 – < 9.0.7 ; 7.1 – < 7.1.26 ; … | PAN-OS: Buffer overflow in the management server | HIGH 8.8 | 1.9 % | ||
| CVE-2020-2014 | 8.0.* ; 7.1.* ; 8.1 – < 8.1.14 ; … | PAN-OS: OS injection vulnerability in PAN-OS management server | HIGH 8.8 | 2.7 % | ||
| CVE-2020-2013 | 8.0.* ; 9.0 – < 9.0.6 ; 7.1 – < 7.1.26 ; … | PAN-OS: Panorama context switch session cookie disclosure | HIGH 8.8 | 0.7 % | ||
| CVE-2020-2012 | 8.0.* ; 7.1.* ; 8.1 – < 8.1.13 ; … | PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak | HIGH 7.5 | 2.0 % | ||
| CVE-2020-2011 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.14 ; … | PAN-OS: Panorama registration denial of service | HIGH 7.5 | 1.9 % | ||
| CVE-2020-2010 | 8.0.* ; 7.1.* ; 9.0 – < 9.0.7 ; … | PAN-OS: Authenticated user command injection vulnerability | HIGH 7.2 | 2.2 % | ||
| CVE-2020-2009 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.14 ; … | PAN-OS: Panorama SD WAN arbitrary file creation | HIGH 7.2 | 2.0 % | ||
| CVE-2020-2008 | 8.0.* ; 7.1.* ; 8.1 – < 8.1.14 | PAN-OS: OS command injection or arbitrary file deletion vulnerability | HIGH 7.2 | 2.8 % | ||
| CVE-2020-2007 | 7.1.* ; 8.0.* ; 9.0 – < 9.0.7 ; … | PAN-OS: OS command injection in management server | HIGH 7.2 | 2.2 % | ||
| CVE-2020-2006 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.14 | PAN-OS: Buffer overflow in management server payload parser | HIGH 8.8 | 1.9 % | ||
| CVE-2020-2005 | 8.0.* ; 7.1 – < 7.1.26 ; 8.1 – < 8.1.13 ; … | PAN-OS: GlobalProtect Clientless VPN session hijacking | HIGH 7.1 | 0.9 % | ||
| CVE-2020-2003 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.14 ; … | PAN-OS: Authenticated administrator can delete arbitrary system file | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-2002 | 8.0.* ; 8.1 – < 8.1.13 ; 9.0 – < 9.0.6 ; … | PAN-OS: Spoofed Kerberos key distribution center authentication bypass | HIGH 8.1 | 1.3 % | ||
| CVE-2020-2001 | 8.0.* ; 7.1.* ; 8.1 – < 8.1.12 ; … | PAN-OS: Panorama External control of file vulnerability leads to privilege escalation | CRITICAL 9.8 | 1.4 % | ||
| CVE-2020-1998 | 8.0.* ; 8.1 – < 8.1.13 ; 7.1 – < 7.1.26 ; … | PAN-OS: Improper SAML SSO authorization of shared local users | HIGH 8.8 | 0.9 % | ||
| CVE-2020-1997 | 7.1 – < 7.1.26 ; 8.0 – < 8.0.14 | PAN-OS: GlobalProtect registration open redirect | MEDIUM 6.1 | 0.9 % | ||
| CVE-2020-1996 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.14 ; … | PAN-OS: Panorama management server log injection | MEDIUM 5.3 | 0.9 % | ||
| CVE-2020-1995 | 9.1 – < 9.1.2 | PAN-OS: Management server rasmgr denial of service | MEDIUM 4.9 | 1.1 % | ||
| CVE-2020-1994 | 7.1.* ; 8.0.* ; 8.1 – < 8.1.13 ; … | PAN-OS: Predictable temporary file vulnerability | MEDIUM 4.4 | 0.2 % | ||
| CVE-2020-1993 | 8.0.* ; 7.1.* ; 8.1 – < 8.1.14 ; … | PAN-OS: GlobalProtect Portal PHP session fixation vulnerability | MEDIUM 5.4 | 0.4 % | ||
| CVE-2020-1992 | 9.0 – < 9.0.7 ; 9.1 – < 9.1.2 | PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation | CRITICAL 9.8 | 3.5 % | ||
| CVE-2020-1990 | 8.1 – < 8.1.13 ; 9.0 – < 9.0.7 | PAN-OS: Buffer overflow in the management server | HIGH 7.2 | 2.1 % | ||
| CVE-2020-1979 | 8.1 – < 8.1.13 | PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation | HIGH 8.1 | 1.0 % | ||
| CVE-2020-1980 | 8.1 < 8.1.13 ; 8.1 !>= 8.1.13 ; 9.0 !>= 9.0.0 ; … | PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands | HIGH 7.8 | 0.6 % | ||
| CVE-2020-1981 | 8.1 < 8.1.13 ; 8.1 !>= 8.1.13 ; 9.0 !>= 9.0.0 ; … | PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation | HIGH 7.8 | 0.4 % | ||
| CVE-2020-1975 | 8.1 – < 8.1.12 ; 9.0 – < 9.0.6 | Missing XML Validation in PAN-OS Web Interface | HIGH 8.8 | 1.0 % | ||
| CVE-2019-17440 | 9.0 – < 9.0.5-h3 | PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access | CRITICAL 10.0 | 1.7 % | ||
| CVE-2019-17437 | 7.1 – < 7.1.25 ; 8.0 – < 8.0.20 ; 8.1 – < 8.1.11 ; … | PAN-OS: Custom-role users may escalate privileges | HIGH 7.8 | 0.3 % | ||
| CVE-2019-1581 | 7.1 – < 7.1.24-h1, 7.1.25 ; 8.0 – < 8.0.19-h1, 8.0.20 ; 8.1 – < 8.1.9-h4, 8.1.10 ; … | PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface | CRITICAL 9.8 | 3.2 % | ||
| CVE-2019-1572 | PAN-OS 9.0.0 | PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files. | HIGH 7.5 | 2.5 % | ||
| CVE-2018-10140 | 8.1.2 and earlier | The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all manageme | MEDIUM 4.3 | 1.9 % | ||
| CVE-2018-10139 | 6.1.21 and earlier ; 7.1.18 and earlier ; 8.0.11 and earlier | The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and | MEDIUM 6.1 | 1.5 % |