paloaltonetworks Vulnerability Advisory Catalog

Total 365 security vulnerabilities recorded for paloaltonetworks software and firmware.

← Back to All Vendors
CVE-2021-3046 MEDIUM
Component: pan-os

An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any ot...

📅 2021-08-11
CVSS 6.8 Dossier →
CVE-2021-3045 MEDIUM
Component: pan-os

An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbit...

📅 2021-08-11
CVSS 4.9 Dossier →
Component: prisma_cloud

A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrar...

📅 2021-07-15
CVSS 7.5 Dossier →
Component: cortex_xdr_agent

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated l...

📅 2021-07-15
CVSS 7.8 Dossier →
CVE-2021-3044 CRITICAL
Component: cortex_xsoar

An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex...

📅 2021-06-22
CVSS 9.8 Dossier →
Component: cortex_xdr_agent

A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local ...

📅 2021-06-10
CVSS 7.8 Dossier →
CVE-2021-3040 MEDIUM
Component: bridgecrew_checkov

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform fi...

📅 2021-06-10
CVSS 6.7 Dossier →
Component: prisma_cloud

An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console where a secret used to authorize ...

📅 2021-06-10
CVSS 3.8 Dossier →
CVE-2021-3038 MEDIUM
Component: globalprotect

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-...

📅 2021-04-20
CVSS 5.5 Dossier →
Component: pan-os

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled confi...

📅 2021-04-20
CVSS 2.3 Dossier →
CVE-2021-3036 MEDIUM
Component: pan-os

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logge...

📅 2021-04-20
CVSS 4.4 Dossier →
CVE-2021-3035 MEDIUM
Component: bridgecrew_checkov

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform fi...

📅 2021-04-20
CVSS 6.7 Dossier →
CVE-2021-3034 MEDIUM
Component: cortex_xsoar

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) ...

📅 2021-03-10
CVSS 5.1 Dossier →
CVE-2021-3033 CRITICAL
Component: prisma_cloud

An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability en...

📅 2021-02-10
CVSS 9.1 Dossier →
CVE-2021-3032 MEDIUM
Component: pan-os

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “http”, “email...

📅 2021-01-13
CVSS 4.4 Dossier →
CVE-2021-3031 MEDIUM
Component: pan-os

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Serie...

📅 2021-01-13
CVSS 4.3 Dossier →
Component: cortex_xdr_agent

A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Wi...

📅 2020-12-09
CVSS 7.8 Dossier →
CVE-2020-2020 MEDIUM
Component: cortex_xdr_agent

An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the soft...

📅 2020-12-09
CVSS 5.5 Dossier →
Component: pan-os

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to ...

📅 2020-11-12
CVSS 8.2 Dossier →
Component: pan-os

An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be ...

📅 2020-11-12
CVSS 3.3 Dossier →
Component: pan-os

An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administr...

📅 2020-11-12
CVSS 7.5 Dossier →
Component: pan-os

An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authenticated administrators to disrupt...

📅 2020-11-12
CVSS 7.2 Dossier →
CVE-2020-1999 MEDIUM
Component: pan-os

A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in ...

📅 2020-11-12
CVSS 5.3 Dossier →
Component: pan-os

An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext whi...

📅 2020-09-09
CVSS 3.3 Dossier →
Page 9 of 16 (365 Total Records)