paloaltonetworks Vulnerability Advisory Catalog

Total 365 security vulnerabilities recorded for paloaltonetworks software and firmware.

← Back to All Vendors
CVE-2024-3386 MEDIUM
Component: pan-os

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as inten...

📅 2024-04-10
CVSS 5.3 Dossier →
Component: pan-os

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eve...

📅 2024-04-10
CVSS 7.5 Dossier →
Component: pan-os

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN M...

📅 2024-04-10
CVSS 7.5 Dossier →
Component: pan-os

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User...

📅 2024-04-10
CVSS 7.4 Dossier →
Component: pan-os

A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that event...

📅 2024-04-10
CVSS 7.5 Dossier →
CVE-2024-2433 MEDIUM
Component: pan-os

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using...

📅 2024-03-13
CVSS 4.3 Dossier →
CVE-2024-2432 MEDIUM
Component: globalprotect

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with...

📅 2024-03-13
CVSS 4.5 Dossier →
CVE-2024-2431 MEDIUM
Component: globalprotect

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a use...

📅 2024-03-13
CVSS 5.5 Dossier →
CVE-2024-0011 MEDIUM
Component: pan-os

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software enables execution of maliciou...

📅 2024-02-14
CVSS 4.3 Dossier →
CVE-2024-0010 MEDIUM
Component: pan-os

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of ma...

📅 2024-02-14
CVSS 4.3 Dossier →
CVE-2024-0009 MEDIUM
Component: pan-os

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen...

📅 2024-02-14
CVSS 6.3 Dossier →
CVE-2024-0008 MEDIUM
Component: pan-os

Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthori...

📅 2024-02-14
CVSS 6.6 Dossier →
CVE-2024-0007 MEDIUM
Component: pan-os

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a...

📅 2024-02-14
CVSS 6.8 Dossier →
CVE-2023-6795 MEDIUM
Component: pan-os

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and pot...

📅 2023-12-13
CVSS 5.5 Dossier →
CVE-2023-6794 MEDIUM
Component: pan-os

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web ...

📅 2023-12-13
CVSS 5.5 Dossier →
Component: pan-os

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active...

📅 2023-12-13
CVSS 2.7 Dossier →
CVE-2023-6792 MEDIUM
Component: pan-os

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system process...

📅 2023-12-13
CVSS 5.5 Dossier →
CVE-2023-6791 MEDIUM
Component: pan-os

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext c...

📅 2023-12-13
CVSS 4.9 Dossier →
Component: pan-os

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload i...

📅 2023-12-13
CVSS 8.8 Dossier →
CVE-2023-6789 MEDIUM
Component: pan-os

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a...

📅 2023-12-13
CVSS 4.3 Dossier →
CVE-2023-3282 MEDIUM
Component: cortex_xsoar

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a l...

📅 2023-11-08
CVSS 6.4 Dossier →
CVE-2023-3280 MEDIUM
Component: cortex_xdr_agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent. ...

📅 2023-09-13
CVSS 5.5 Dossier →
Component: pan-os

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically c...

📅 2023-07-12
CVSS 5.5 Dossier →
CVE-2023-0010 MEDIUM
Component: pan-os

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payloa...

📅 2023-06-14
CVSS 5.4 Dossier →
Page 6 of 16 (365 Total Records)