Latest vulnerabilities for "paloaltonetworks pan-os" 8.1.0

7.1

EPSS

0.04%

First published (updated )

CVE-2024-8687

Paloaltonetworks Pan-osPAN-OS: Plaintext Disclosure of External System Integration Credentials

4.9

EPSS

0.05%

First published (updated )

CVE-2023-6791

Paloaltonetworks Pan-osPAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

4.8

EPSS

0.04%

First published (updated )

CVE-2023-6789

Paloaltonetworks Pan-osPAN-OS: OS Command Injection Vulnerability in the Web Interface

5.5

EPSS

0.05%

First published (updated )

CVE-2023-6795

Paloaltonetworks Pan-osPAN-OS: File Upload Vulnerability in the Web Interface

5.5

EPSS

0.05%

First published (updated )

CVE-2023-6794

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: OS Command Injection Vulnerability in the XML API

6.3

EPSS

0.05%

First published (updated )

CVE-2023-6792

Paloaltonetworks Pan-osPAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface

8.8

EPSS

0.06%

First published (updated )

CVE-2023-6790

Paloaltonetworks Pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication

5.4

First published (updated )

CVE-2023-0010

Paloaltonetworks Pan-osPAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface

4.4

First published (updated )

CVE-2023-0008

Paloaltonetworks Pan-osPAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface

6.5

First published (updated )

CVE-2023-0007

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: Exposure of Sensitive Information Vulnerability

4.9

First published (updated )

CVE-2023-0005

Paloaltonetworks Pan-osPAN-OS: Local File Deletion Vulnerability

6.5

First published (updated )

CVE-2023-0004

Paloaltonetworks Pan-osPAN-OS: Authentication Bypass in Web Interface

8.1

First published (updated )

CVE-2022-0030

Paloaltonetworks Pan-osPAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit

9

First published (updated )

CVE-2022-0024

Paloaltonetworks Pan-osPAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy

5.9

First published (updated )

CVE-2022-0023

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes

4.6

First published (updated )

CVE-2022-0022

Paloaltonetworks Pan-osPAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering

6.5

First published (updated )

CVE-2022-0011

Paloaltonetworks Pan-osPAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces

10

First published (updated )

CVE-2021-3064

Paloaltonetworks Pan-osPAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users

8.8

First published (updated )

CVE-2021-3062

Paloaltonetworks Pan-osPAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)

9.3

First published (updated )

CVE-2021-3060

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates

8.1

First published (updated )

CVE-2021-3059

Paloaltonetworks Pan-osPAN-OS: OS Command Injection Vulnerability in Web Interface XML API

9

First published (updated )

CVE-2021-3058

Paloaltonetworks Pan-osPAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication

8.8

First published (updated )

CVE-2021-3056

Paloaltonetworks Pan-osPAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces

7.5

First published (updated )

CVE-2021-3063

Paloaltonetworks Pan-osPAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)

9

First published (updated )

CVE-2021-3061

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface

7.5

First published (updated )

CVE-2021-3055

Paloaltonetworks Pan-osPAN-OS: Exceptional Condition Denial-of-Service (DoS)

7.5

First published (updated )

CVE-2021-3053

Paloaltonetworks Pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface

8

First published (updated )

CVE-2021-3052

Paloaltonetworks Pan-osPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability

8.5

First published (updated )

CVE-2021-3054

Paloaltonetworks Pan-osPAN-OS: Weak Cryptography Used in Web Interface Authentication

4.2

First published (updated )

CVE-2021-3047

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: OS Command Argument Injection in Web Interface

4.9

First published (updated )

CVE-2021-3045

Paloaltonetworks Pan-osPAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal

6.8

First published (updated )

CVE-2021-3046

Paloaltonetworks Pan-osPAN-OS: Secrets for scheduled configuration exports are logged in system logs

low

2.3

First published (updated )

CVE-2021-3037

Paloaltonetworks Pan-osPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly

4.4

First published (updated )

CVE-2021-3036

Paloaltonetworks Pan-osPAN-OS: Configuration secrets for log forwarding may be logged in system logs

4.4

First published (updated )

CVE-2021-3032

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: Information exposure in Ethernet data frame construction (Etherleak)

4.3

First published (updated )

CVE-2021-3031

Paloaltonetworks Pan-osPAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification

8.2

First published (updated )

CVE-2020-2050

Paloaltonetworks Pan-osPAN-OS: System proxy passwords may be logged in clear text while viewing system state

low

3.3

First published (updated )

CVE-2020-2048

Paloaltonetworks Pan-osPAN-OS: Panorama session disclosure during context switch into managed device

7.5

First published (updated )

CVE-2020-2022

Paloaltonetworks Pan-osPAN-OS: Threat signatures are evaded by specifically crafted packets

5.3

First published (updated )

CVE-2020-1999

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: OS command injection and memory corruption vulnerability

9

First published (updated )

CVE-2020-2000

Paloaltonetworks Pan-osPAN-OS: Passwords may be logged in clear text while storing operational command (op command) history

4

First published (updated )

CVE-2020-2044

Paloaltonetworks Pan-osPAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled

10

First published (updated )

CVE-2020-2040

Paloaltonetworks Pan-osPAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload

5.3

First published (updated )

CVE-2020-2039

Paloaltonetworks Pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface

8.8

First published (updated )

CVE-2020-2036

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Paloaltonetworks Pan-osPAN-OS: OS command injection vulnerability in the management web interface

9

First published (updated )

CVE-2020-2037

Paloaltonetworks Pan-osPAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs

4

First published (updated )

CVE-2020-2043

Paloaltonetworks Pan-osPAN-OS: Management web interface denial-of-service (DoS)

7.8

First published (updated )

CVE-2020-2041

Paloaltonetworks Pan-osPAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services

5.8

First published (updated )

CVE-2020-1982

Paloaltonetworks Pan-osPAN-OS: OS command injection vulnerability in the management interface

9

First published (updated )

CVE-2020-2030

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.