Advisories · Technology
Palo Alto Networks PAN-OS.
Every CVE that names Palo Alto Networks PAN-OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
PAN-OS: GlobalProtect registration open redirect
- Palo Alto Networks PAN-OS
- Open redirect
- CVSS 5.3 Medium
PAN-OS: Panorama management server log injection
- Palo Alto Networks PAN-OS
- Broken access control
- CVSS 4.9 Medium
PAN-OS: Management server rasmgr denial of service
- Palo Alto Networks PAN-OS
- Memory corruption
- CVSS 4.1 Medium
PAN-OS: Predictable temporary file vulnerability
- Palo Alto Networks PAN-OS
- CWE-377
- CVSS 3.7 Low
PAN-OS: GlobalProtect Portal PHP session fixation vulnerability
- Palo Alto Networks PAN-OS
- Authentication bypass
- CVSS 8.1 High
PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation
- Palo Alto Networks PAN-OS
- Memory corruption
- CVSS 7.2 High
PAN-OS: Buffer overflow in the management server
- Palo Alto Networks PAN-OS
- Memory corruption
- CVSS 8.1 High
PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation
- Palo Alto Networks PAN-OS
- Memory corruption
- CVSS 7.8 High
PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands
- Palo Alto Networks PAN-OS
- Command injection
- CVSS 7.0 High
PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation
- Palo Alto Networks PAN-OS
- CWE-377
- CVSS 6.8 Medium
Missing XML Validation in PAN-OS Web Interface
- Palo Alto Networks PAN-OS
- CWE-112
- CVSS 10.0 CriticalCritical · CVSS 9+
PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
- Palo Alto Networks PAN-OS
- CWE-923
- CVSS 7.8 High
PAN-OS: Custom-role users may escalate privileges
- Palo Alto Networks PAN-OS
- CWE-280
-
Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corruption by rekeying the current client interactive session.
- Palo Alto Networks PAN-OS
- CVSS 9.8 CriticalCritical · CVSS 9+
PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface
- Palo Alto Networks PAN-OS
- Command injection
-
Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow a remote, unauthenticated user to craft a message to Secur…
- Palo Alto Networks PAN-OS
-
Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges…
- Palo Alto Networks PAN-OS
-
Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s permissions.
- Palo Alto Networks PAN-OS
-
PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.
- Palo Alto Networks PAN-OS
-
The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML.
- Palo Alto Networks PAN-OS
-
The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with…
- Palo Alto Networks PAN-OS
-
Palo Alto Networks PAN-OS: The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may…
- Palo Alto Networks PAN-OS
-
Palo Alto Networks PAN-OS: The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and…
- Palo Alto Networks PAN-OS