# Palo Alto Networks PAN-OS.

Every CVE that names Palo Alto Networks PAN-OS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users](https://agentprime.io/advisories/CVE-2021-3062.md)
  `CVE-2021-3062` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2021 · Tags: Broken access control
- [PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)](https://agentprime.io/advisories/CVE-2021-3061.md)
  `CVE-2021-3061` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 10 Nov 2021 · Tags: Command injection
- [PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)](https://agentprime.io/advisories/CVE-2021-3060.md)
  `CVE-2021-3060` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.33 · Not analysed yet · Published 10 Nov 2021 · Tags: Command injection
- [PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates](https://agentprime.io/advisories/CVE-2021-3059.md)
  `CVE-2021-3059` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2021 · Tags: Command injection
- [PAN-OS: OS Command Injection Vulnerability in Web Interface XML API](https://agentprime.io/advisories/CVE-2021-3058.md)
  `CVE-2021-3058` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2021 · Tags: Command injection
- [PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication](https://agentprime.io/advisories/CVE-2021-3056.md)
  `CVE-2021-3056` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2021 · Tags: Memory corruption
- [PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface](https://agentprime.io/advisories/CVE-2021-3055.md)
  `CVE-2021-3055` · CVE record: Palo Alto Networks PAN-OS · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2021 · Tags: XML external entities (XXE)
- [PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability](https://agentprime.io/advisories/CVE-2021-3054.md)
  `CVE-2021-3054` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 8 Sept 2021 · Tags: Race condition
- [PAN-OS: Exceptional Condition Denial-of-Service (DoS)](https://agentprime.io/advisories/CVE-2021-3053.md)
  `CVE-2021-3053` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2021 · Tags: CWE-755
- [PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface](https://agentprime.io/advisories/CVE-2021-3052.md)
  `CVE-2021-3052` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.0 High · Not analysed yet · Published 8 Sept 2021 · Tags: Cross-site scripting (XSS)
- [PAN-OS: OS Command Injection Vulnerability in Web Interface](https://agentprime.io/advisories/CVE-2021-3050.md)
  `CVE-2021-3050` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2021 · Tags: Command injection
- [PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage](https://agentprime.io/advisories/CVE-2021-3048.md)
  `CVE-2021-3048` · CVE record: Palo Alto Networks PAN-OS · CVSS 5.9 Medium · Not analysed yet · Published 11 Aug 2021 · Tags: CWE-20
- [PAN-OS: Weak Cryptography Used in Web Interface Authentication](https://agentprime.io/advisories/CVE-2021-3047.md)
  `CVE-2021-3047` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.2 Medium · Not analysed yet · Published 11 Aug 2021 · Tags: Weak cryptography or TLS
- [PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal](https://agentprime.io/advisories/CVE-2021-3046.md)
  `CVE-2021-3046` · CVE record: Palo Alto Networks PAN-OS · CVSS 6.8 Medium · Not analysed yet · Published 11 Aug 2021 · Tags: Authentication bypass
- [PAN-OS: OS Command Argument Injection in Web Interface](https://agentprime.io/advisories/CVE-2021-3045.md)
  `CVE-2021-3045` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.9 Medium · Not analysed yet · Published 11 Aug 2021 · Tags: Command injection
- [PAN-OS: Secrets for scheduled configuration exports are logged in system logs](https://agentprime.io/advisories/CVE-2021-3037.md)
  `CVE-2021-3037` · CVE record: Palo Alto Networks PAN-OS · CVSS 2.3 Low · Not analysed yet · Published 20 Apr 2021 · Tags: CWE-534
- [PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly](https://agentprime.io/advisories/CVE-2021-3036.md)
  `CVE-2021-3036` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.4 Medium · Not analysed yet · Published 20 Apr 2021 · Tags: Information disclosure
- [PAN-OS: Configuration secrets for log forwarding may be logged in system logs](https://agentprime.io/advisories/CVE-2021-3032.md)
  `CVE-2021-3032` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.4 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: Information disclosure
- [PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)](https://agentprime.io/advisories/CVE-2021-3031.md)
  `CVE-2021-3031` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.3 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: Information disclosure
- [PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification](https://agentprime.io/advisories/CVE-2020-2050.md)
  `CVE-2020-2050` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.2 High · Not analysed yet · Published 12 Nov 2020 · Tags: Broken access control
- [PAN-OS: System proxy passwords may be logged in clear text while viewing system state](https://agentprime.io/advisories/CVE-2020-2048.md)
  `CVE-2020-2048` · CVE record: Palo Alto Networks PAN-OS · CVSS 3.3 Low · Not analysed yet · Published 12 Nov 2020 · Tags: Information disclosure
- [PAN-OS: Panorama session disclosure during context switch into managed device](https://agentprime.io/advisories/CVE-2020-2022.md)
  `CVE-2020-2022` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2020 · Tags: Information disclosure
- [PAN-OS: OS command injection and memory corruption vulnerability](https://agentprime.io/advisories/CVE-2020-2000.md)
  `CVE-2020-2000` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 12 Nov 2020 · Tags: Command injection, Memory corruption, CWE-20
- [PAN-OS: Threat signatures are evaded by specifically crafted packets](https://agentprime.io/advisories/CVE-2020-1999.md)
  `CVE-2020-1999` · CVE record: Palo Alto Networks PAN-OS · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2020 · Tags: CWE-754
- [PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history](https://agentprime.io/advisories/CVE-2020-2044.md)
  `CVE-2020-2044` · CVE record: Palo Alto Networks PAN-OS · CVSS 3.3 Low · Not analysed yet · Published 9 Sept 2020 · Tags: Information disclosure
- [PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs](https://agentprime.io/advisories/CVE-2020-2043.md)
  `CVE-2020-2043` · CVE record: Palo Alto Networks PAN-OS · CVSS 3.3 Low · Not analysed yet · Published 9 Sept 2020 · Tags: Information disclosure
- [PAN-OS: Buffer overflow in the management web interface](https://agentprime.io/advisories/CVE-2020-2042.md)
  `CVE-2020-2042` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2020 · Tags: Memory corruption
- [PAN-OS: Management web interface denial-of-service (DoS)](https://agentprime.io/advisories/CVE-2020-2041.md)
  `CVE-2020-2041` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2020 · Tags: CWE-16
- [PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled](https://agentprime.io/advisories/CVE-2020-2040.md)
  `CVE-2020-2040` · CVE record: Palo Alto Networks PAN-OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2020 · Tags: Memory corruption
- [PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload](https://agentprime.io/advisories/CVE-2020-2039.md)
  `CVE-2020-2039` · CVE record: Palo Alto Networks PAN-OS · CVSS 5.3 Medium · EPSS 0.46 · Not analysed yet · Published 9 Sept 2020 · Tags: Denial of service
- [PAN-OS: OS command injection vulnerability in the management web interface](https://agentprime.io/advisories/CVE-2020-2038.md)
  `CVE-2020-2038` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.86 · Not analysed yet · Published 9 Sept 2020 · Tags: Command injection
- [PAN-OS: OS command injection vulnerability in the management web interface](https://agentprime.io/advisories/CVE-2020-2037.md)
  `CVE-2020-2037` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2020 · Tags: Command injection
- [PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface](https://agentprime.io/advisories/CVE-2020-2036.md)
  `CVE-2020-2036` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.24 · Not analysed yet · Published 9 Sept 2020 · Tags: Cross-site scripting (XSS)
- [PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions](https://agentprime.io/advisories/CVE-2020-2035.md)
  `CVE-2020-2035` · CVE record: Palo Alto Networks PAN-OS · CVSS 3.0 Low · Not analysed yet · Published 12 Aug 2020 · Tags: CWE-20
- [PAN-OS: OS command injection vulnerability in GlobalProtect portal](https://agentprime.io/advisories/CVE-2020-2034.md)
  `CVE-2020-2034` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.1 High · Not analysed yet · Published 8 Jul 2020 · Tags: Command injection
- [PAN-OS: Integer underflow in the management interface](https://agentprime.io/advisories/CVE-2020-2031.md)
  `CVE-2020-2031` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.9 Medium · Not analysed yet · Published 8 Jul 2020 · Tags: Memory corruption
- [PAN-OS: OS command injection vulnerability in the management interface](https://agentprime.io/advisories/CVE-2020-2030.md)
  `CVE-2020-2030` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 8 Jul 2020 · Tags: Command injection
- [PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services](https://agentprime.io/advisories/CVE-2020-1982.md)
  `CVE-2020-1982` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2020 · Tags: Weak cryptography or TLS
- [PAN-OS: Authentication Bypass in SAML Authentication](https://agentprime.io/advisories/CVE-2020-2021.md)
  `CVE-2020-2021` · CVE record: Palo Alto Networks PAN-OS · CVSS 10.0 Critical · Critical (KEV, CVSS 9+) · In CISA KEV, ransomware · Not analysed yet · Published 29 Jun 2020 · Tags: Weak cryptography or TLS
- [PAN-OS: OS command injection vulnerability in management interface certificate generator](https://agentprime.io/advisories/CVE-2020-2029.md)
  `CVE-2020-2029` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 10 Jun 2020 · Tags: Command injection
- [PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification](https://agentprime.io/advisories/CVE-2020-2028.md)
  `CVE-2020-2028` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 10 Jun 2020 · Tags: Command injection
- [PAN-OS: Buffer overflow in authd authentication response](https://agentprime.io/advisories/CVE-2020-2027.md)
  `CVE-2020-2027` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 10 Jun 2020 · Tags: Memory corruption
- [PAN-OS: Panorama authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2020-2018.md)
  `CVE-2020-2018` · CVE record: Palo Alto Networks PAN-OS · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2020 · Tags: Authentication bypass
- [PAN-OS: DOM-Based cross site scripting vulnerability in management web interface](https://agentprime.io/advisories/CVE-2020-2017.md)
  `CVE-2020-2017` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.8 High · Not analysed yet · Published 13 May 2020 · Tags: Cross-site scripting (XSS)
- [PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation](https://agentprime.io/advisories/CVE-2020-2016.md)
  `CVE-2020-2016` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.0 High · Not analysed yet · Published 13 May 2020 · Tags: CWE-377
- [PAN-OS: Buffer overflow in the management server](https://agentprime.io/advisories/CVE-2020-2015.md)
  `CVE-2020-2015` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.8 High · Not analysed yet · Published 13 May 2020 · Tags: Memory corruption
- [PAN-OS: OS injection vulnerability in PAN-OS management server](https://agentprime.io/advisories/CVE-2020-2014.md)
  `CVE-2020-2014` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.8 High · Not analysed yet · Published 13 May 2020 · Tags: Command injection
- [PAN-OS: Panorama context switch session cookie disclosure](https://agentprime.io/advisories/CVE-2020-2013.md)
  `CVE-2020-2013` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.3 High · Not analysed yet · Published 13 May 2020 · Tags: Weak cryptography or TLS
- [PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak](https://agentprime.io/advisories/CVE-2020-2012.md)
  `CVE-2020-2012` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.5 High · Not analysed yet · Published 13 May 2020 · Tags: XML external entities (XXE)
- [PAN-OS: Panorama registration denial of service](https://agentprime.io/advisories/CVE-2020-2011.md)
  `CVE-2020-2011` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.5 High · Not analysed yet · Published 13 May 2020 · Tags: CWE-20
- [PAN-OS: Authenticated user command injection vulnerability](https://agentprime.io/advisories/CVE-2020-2010.md)
  `CVE-2020-2010` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 13 May 2020 · Tags: Command injection
- [PAN-OS: Panorama SD WAN arbitrary file creation](https://agentprime.io/advisories/CVE-2020-2009.md)
  `CVE-2020-2009` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 13 May 2020 · Tags: Path traversal
- [PAN-OS: OS command injection or arbitrary file deletion vulnerability](https://agentprime.io/advisories/CVE-2020-2008.md)
  `CVE-2020-2008` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 13 May 2020 · Tags: Path traversal, Command injection
- [PAN-OS: OS command injection in management server](https://agentprime.io/advisories/CVE-2020-2007.md)
  `CVE-2020-2007` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 13 May 2020 · Tags: Command injection
- [PAN-OS: Buffer overflow in management server payload parser](https://agentprime.io/advisories/CVE-2020-2006.md)
  `CVE-2020-2006` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.2 High · Not analysed yet · Published 13 May 2020 · Tags: Memory corruption
- [PAN-OS: GlobalProtect Clientless VPN session hijacking](https://agentprime.io/advisories/CVE-2020-2005.md)
  `CVE-2020-2005` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.1 High · Not analysed yet · Published 13 May 2020 · Tags: Cross-site scripting (XSS)
- [PAN-OS: Authenticated administrator can delete arbitrary system file](https://agentprime.io/advisories/CVE-2020-2003.md)
  `CVE-2020-2003` · CVE record: Palo Alto Networks PAN-OS · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2020 · Tags: Path traversal
- [PAN-OS: Spoofed Kerberos key distribution center authentication bypass](https://agentprime.io/advisories/CVE-2020-2002.md)
  `CVE-2020-2002` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.1 High · Not analysed yet · Published 13 May 2020 · Tags: Authentication bypass
- [PAN-OS: Panorama External control of file vulnerability leads to privilege escalation](https://agentprime.io/advisories/CVE-2020-2001.md)
  `CVE-2020-2001` · CVE record: Palo Alto Networks PAN-OS · CVSS 8.1 High · Not analysed yet · Published 13 May 2020 · Tags: CWE-123
- [PAN-OS: Improper SAML SSO authorization of shared local users](https://agentprime.io/advisories/CVE-2020-1998.md)
  `CVE-2020-1998` · CVE record: Palo Alto Networks PAN-OS · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2020 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/technology/palo-alto-networks-pan-os.md>
Older: <https://agentprime.io/advisories/technology/palo-alto-networks-pan-os.md?cursor=WyIyMDIwLTA1LTEzVDE5OjA3OjE0LjA1OTAwMFoiLCJDVkUtMjAyMC0xOTk4Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=palo-alto-networks-pan-os&cursor=WyIyMDIxLTExLTEwVDE3OjEwOjI5LjQ2MTAwMFoiLCJDVkUtMjAyMS0zMDYzIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/palo-alto-networks-pan-os/?cursor=WyIyMDIxLTExLTEwVDE3OjEwOjI5LjQ2MTAwMFoiLCJDVkUtMjAyMS0zMDYzIl0>. Everything for agents: <https://agentprime.io/llms.txt>.