# Palo Alto Networks Prisma Access. Every CVE that names Palo Alto Networks Prisma Access among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Expedition: Wildcard Expansion Vulnerability](https://agentprime.io/advisories/CVE-2025-0106.md) `CVE-2025-0106` · CVE record: Palo Alto Networks Cloud NGFW and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 11 Jan 2025 · Tags: CWE-155 - [Expedition: Arbitrary File Deletion Vulnerability](https://agentprime.io/advisories/CVE-2025-0105.md) `CVE-2025-0105` · CVE record: Palo Alto Networks Cloud NGFW and 4 more · CVSS 6.9 Medium · EPSS 0.13 · Not analysed yet · Published 11 Jan 2025 · Tags: Path traversal - [Expedition: Cross-Site Scripting (XSS) Vulnerability](https://agentprime.io/advisories/CVE-2025-0104.md) `CVE-2025-0104` · CVE record: Palo Alto Networks Cloud NGFW and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Jan 2025 · Tags: Cross-site scripting (XSS) - [Expedition: SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-0103.md) `CVE-2025-0103` · CVE record: Palo Alto Networks Cloud NGFW and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jan 2025 · Tags: SQL injection - [PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface](https://agentprime.io/advisories/CVE-2024-9474.md) `CVE-2024-9474` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.9 Medium · Critical (KEV) · In CISA KEV, ransomware · EPSS 0.94 · Not analysed yet · Published 18 Nov 2024 · Tags: Command injection - [PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)](https://agentprime.io/advisories/CVE-2024-0012.md) `CVE-2024-0012` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 9.3 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 18 Nov 2024 · Tags: Authentication bypass - [PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet](https://agentprime.io/advisories/CVE-2024-2550.md) `CVE-2024-2550` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.7 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator](https://agentprime.io/advisories/CVE-2024-5920.md) `CVE-2024-5920` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 4.6 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Cross-site scripting (XSS) - [PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)](https://agentprime.io/advisories/CVE-2024-2552.md) `CVE-2024-2552` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Path traversal - [PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User](https://agentprime.io/advisories/CVE-2024-5918.md) `CVE-2024-5918` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Weak cryptography or TLS - [PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability](https://agentprime.io/advisories/CVE-2024-5919.md) `CVE-2024-5919` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 5.1 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: XML external entities (XXE) - [PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet](https://agentprime.io/advisories/CVE-2024-2551.md) `CVE-2024-2551` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.7 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic](https://agentprime.io/advisories/CVE-2024-9472.md) `CVE-2024-9472` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.7 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [PAN-OS: Privilege Escalation (PE) Vulnerability in XML API](https://agentprime.io/advisories/CVE-2024-9471.md) `CVE-2024-9471` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2024 · Tags: Privilege escalation - [PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet](https://agentprime.io/advisories/CVE-2024-9468.md) `CVE-2024-9468` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2024 · Tags: Memory corruption - [PAN-OS: User Impersonation in GlobalProtect Portal](https://agentprime.io/advisories/CVE-2024-8691.md) `CVE-2024-8691` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: Broken access control - [PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)](https://agentprime.io/advisories/CVE-2024-8688.md) `CVE-2024-8688` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-155 - [PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes](https://agentprime.io/advisories/CVE-2024-8687.md) `CVE-2024-8687` · CVE record: Palo Alto Networks PAN-OS and 3 more · CVSS 6.9 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: Information disclosure - [PAN-OS: Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2024-8686.md) `CVE-2024-8686` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 8.6 High · Not analysed yet · Published 11 Sept 2024 · Tags: Command injection - [PAN-OS: Cleartext Exposure of External System Secrets](https://agentprime.io/advisories/CVE-2024-5916.md) `CVE-2024-5916` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-313 - [PAN-OS: Improper Input Validation Vulnerability in PAN-OS](https://agentprime.io/advisories/CVE-2024-5913.md) `CVE-2024-5913` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-20 - [PAN-OS: File Upload Vulnerability in the Panorama Web Interface](https://agentprime.io/advisories/CVE-2024-5911.md) `CVE-2024-5911` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 7.0 High · Not analysed yet · Published 10 Jul 2024 · Tags: Unrestricted file upload - [PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect](https://agentprime.io/advisories/CVE-2024-3400.md) `CVE-2024-3400` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 12 Apr 2024 · Tags: Command injection, CWE-20 - [PAN-OS: User Impersonation in GlobalProtect SSL VPN](https://agentprime.io/advisories/CVE-2024-3388.md) `CVE-2024-3388` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.1 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Privilege escalation, Broken access control - [PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure](https://agentprime.io/advisories/CVE-2024-3387.md) `CVE-2024-3387` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Weak cryptography or TLS - [PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended](https://agentprime.io/advisories/CVE-2024-3386.md) `CVE-2024-3386` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-436 - [PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled](https://agentprime.io/advisories/CVE-2024-3385.md) `CVE-2024-3385` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2024 · Tags: Memory corruption, CWE-20 - [PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets](https://agentprime.io/advisories/CVE-2024-3384.md) `CVE-2024-3384` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-1286 - [PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)](https://agentprime.io/advisories/CVE-2024-3383.md) `CVE-2024-3383` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 7.4 High · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-282 - [PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets](https://agentprime.io/advisories/CVE-2024-3382.md) `CVE-2024-3382` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2024 · Tags: Denial of service - [PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss](https://agentprime.io/advisories/CVE-2024-2433.md) `CVE-2024-2433` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Privilege escalation - [PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication](https://agentprime.io/advisories/CVE-2024-0011.md) `CVE-2024-0011` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: Cross-site scripting (XSS) - [PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal](https://agentprime.io/advisories/CVE-2024-0010.md) `CVE-2024-0010` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: Cross-site scripting (XSS) - [PAN-OS: Improper IP Address Verification in GlobalProtect Gateway](https://agentprime.io/advisories/CVE-2024-0009.md) `CVE-2024-0009` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.3 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-940 - [PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface](https://agentprime.io/advisories/CVE-2024-0008.md) `CVE-2024-0008` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: Authentication bypass - [PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface](https://agentprime.io/advisories/CVE-2024-0007.md) `CVE-2024-0007` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: Cross-site scripting (XSS) - [PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator](https://agentprime.io/advisories/CVE-2023-6793.md) `CVE-2023-6793` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 2.7 Low · Not analysed yet · Published 13 Dec 2023 · Tags: Privilege escalation - [PAN-OS: Plaintext Disclosure of External System Integration Credentials](https://agentprime.io/advisories/CVE-2023-6791.md) `CVE-2023-6791` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.9 Medium · Not analysed yet · Published 13 Dec 2023 · Tags: CWE-701 - [PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface](https://agentprime.io/advisories/CVE-2023-6789.md) `CVE-2023-6789` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2023 · Tags: Cross-site scripting (XSS) - [PAN-OS: OS Command Injection Vulnerability in the Web Interface](https://agentprime.io/advisories/CVE-2023-6795.md) `CVE-2023-6795` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2023 · Tags: Command injection - [PAN-OS: File Upload Vulnerability in the Web Interface](https://agentprime.io/advisories/CVE-2023-6794.md) `CVE-2023-6794` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2023 · Tags: Unrestricted file upload - [PAN-OS: OS Command Injection Vulnerability in the XML API](https://agentprime.io/advisories/CVE-2023-6792.md) `CVE-2023-6792` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2023 · Tags: Command injection - [PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface](https://agentprime.io/advisories/CVE-2023-6790.md) `CVE-2023-6790` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 8.8 High · Not analysed yet · Published 13 Dec 2023 · Tags: Cross-site scripting (XSS) - [PAN-OS: Read System Files and Resources During Configuration Commit](https://agentprime.io/advisories/CVE-2023-38046.md) `CVE-2023-38046` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: CWE-610 - [PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication](https://agentprime.io/advisories/CVE-2023-0010.md) `CVE-2023-0010` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 14 Jun 2023 · Tags: Cross-site scripting (XSS) - [PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface](https://agentprime.io/advisories/CVE-2023-0008.md) `CVE-2023-0008` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.4 Medium · Not analysed yet · Published 10 May 2023 · Tags: Path traversal - [PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface](https://agentprime.io/advisories/CVE-2023-0007.md) `CVE-2023-0007` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2023 · Tags: Cross-site scripting (XSS) - [PAN-OS: Exposure of Sensitive Information Vulnerability](https://agentprime.io/advisories/CVE-2023-0005.md) `CVE-2023-0005` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 4.1 Medium · Not analysed yet · Published 12 Apr 2023 · Tags: Information disclosure - [PAN-OS: Local File Deletion Vulnerability](https://agentprime.io/advisories/CVE-2023-0004.md) `CVE-2023-0004` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Apr 2023 · Tags: CWE-703 - [PAN-OS: Authentication Bypass in Web Interface](https://agentprime.io/advisories/CVE-2022-0030.md) `CVE-2022-0030` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 8.1 High · Not analysed yet · Published 12 Oct 2022 · Tags: Authentication bypass - [PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering](https://agentprime.io/advisories/CVE-2022-0028.md) `CVE-2022-0028` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Aug 2022 · Tags: CWE-406 - [PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy](https://agentprime.io/advisories/CVE-2022-0023.md) `CVE-2022-0023` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Apr 2022 · Tags: CWE-755 - [PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes](https://agentprime.io/advisories/CVE-2022-0022.md) `CVE-2022-0022` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 4.1 Medium · Not analysed yet · Published 9 Mar 2022 · Tags: Weak cryptography or TLS - [PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering](https://agentprime.io/advisories/CVE-2022-0011.md) `CVE-2022-0011` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2022 · Tags: CWE-436 - [PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces](https://agentprime.io/advisories/CVE-2021-3064.md) `CVE-2021-3064` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.20 · Not analysed yet · Published 10 Nov 2021 · Tags: Memory corruption - [PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces](https://agentprime.io/advisories/CVE-2021-3063.md) `CVE-2021-3063` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2021 · Tags: CWE-755 - [PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users](https://agentprime.io/advisories/CVE-2021-3062.md) `CVE-2021-3062` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2021 · Tags: Broken access control - [PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)](https://agentprime.io/advisories/CVE-2021-3061.md) `CVE-2021-3061` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 10 Nov 2021 · Tags: Command injection - [PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)](https://agentprime.io/advisories/CVE-2021-3060.md) `CVE-2021-3060` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.33 · Not analysed yet · Published 10 Nov 2021 · Tags: Command injection - [PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates](https://agentprime.io/advisories/CVE-2021-3059.md) `CVE-2021-3059` · CVE record: Palo Alto Networks PAN-OS and 1 more · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2021 · Tags: Command injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .