paloaltonetworks Vulnerability Advisory Catalog

Total 365 security vulnerabilities recorded for paloaltonetworks software and firmware.

← Back to All Vendors
Component: globalprotect

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with e...

📅 2023-06-14
CVSS 7.8 Dossier →
CVE-2023-0008 MEDIUM
Component: pan-os

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interfa...

📅 2023-05-10
CVSS 4.4 Dossier →
CVE-2023-0007 MEDIUM
Component: pan-os

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administra...

📅 2023-05-10
CVSS 6.5 Dossier →
CVE-2023-0006 MEDIUM
Component: globalprotect

A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endp...

📅 2023-04-12
CVSS 6.3 Dossier →
CVE-2023-0005 MEDIUM
Component: pan-os

A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext values of secrets stored in the d...

📅 2023-04-12
CVSS 4.1 Dossier →
CVE-2023-0004 MEDIUM
Component: pan-os

A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file s...

📅 2023-04-12
CVSS 6.5 Dossier →
CVE-2023-0003 MEDIUM
Component: cortex_xsoar

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface ...

📅 2023-02-08
CVSS 6.5 Dossier →
CVE-2023-0002 MEDIUM
Component: cortex_xdr_agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool c...

📅 2023-02-08
CVSS 5.5 Dossier →
CVE-2023-0001 MEDIUM
Component: cortex_xdr_agent

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose th...

📅 2023-02-08
CVSS 6.0 Dossier →
CVE-2022-0031 MEDIUM
Component: cortex_xsoar

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a lo...

📅 2022-11-09
CVSS 6.7 Dossier →
Component: pan-os

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of t...

📅 2022-10-12
CVSS 8.1 Dossier →
CVE-2022-0029 MEDIUM
Component: cortex_xdr_agent

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the s...

📅 2022-09-14
CVSS 5.5 Dossier →
Component: pan-os

A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) at...

📅 2022-08-10
CVSS 8.6 Dossier →
CVE-2022-0027 MEDIUM
Component: cortex_xsoar

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an ...

📅 2022-05-11
CVSS 4.3 Dossier →
CVE-2022-0026 MEDIUM
Component: cortex_xdr_agent

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local ...

📅 2022-05-11
CVSS 6.7 Dossier →
CVE-2022-0025 MEDIUM
Component: cortex_xdr_agent

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local ...

📅 2022-05-11
CVSS 6.7 Dossier →
Component: pan-os

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically...

📅 2022-05-11
CVSS 7.2 Dossier →
CVE-2022-0023 MEDIUM
Component: pan-os

An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a medd...

📅 2022-04-13
CVSS 5.9 Dossier →
CVE-2022-0022 MEDIUM
Component: pan-os

Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are n...

📅 2022-03-09
CVSS 4.1 Dossier →
Component: globalprotect

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentia...

📅 2022-02-10
CVSS 3.3 Dossier →
CVE-2022-0020 MEDIUM
Component: cortex_xsoar

A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to s...

📅 2022-02-10
CVSS 6.8 Dossier →
CVE-2022-0019 MEDIUM
Component: globalprotect

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials ...

📅 2022-02-10
CVSS 4.7 Dossier →
CVE-2022-0018 MEDIUM
Component: globalprotect

An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user ...

📅 2022-02-10
CVSS 6.1 Dossier →
Component: globalprotect

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that ena...

📅 2022-02-10
CVSS 7.0 Dossier →
Page 7 of 16 (365 Total Records)