[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv3Gx_LTK0vqAhA7tpM3X3ohjlcspjj-atlBb998ScmQ":3,"g5a-family:paloaltonetworks\u002Fprisma_access":119,"g5a-ex:paloaltonetworks\u002Fprisma_access@*":120},{"success":4,"data":5},true,{"product":6,"versions":40,"topVulnerabilitiesByEpss":52,"kevVulnerabilities":91,"seoMetadata":97,"meta":116},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":39},"paloaltonetworks","prisma_access",11,6,1,"2024-12-27",[14,19,21,23,25,27,29,31,33,35,37],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2.1",3,0,false,{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},"2.2",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"4.0",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"4.1",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"4.2",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"5.0",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"5.0.1",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"5.1",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"5.1.1",{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},"5.2",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"5.2.1","Prisma Access by Paloaltonetworks is a technology product with 11 tracked versions and 6 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[41,42,43,44,45,46,47,48,49,50,51],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},[53,61,66,71,78,85],{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":18,"epssScore":60},"CVE-2021-3060","An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root user privileges. The attacker must have network access to the GlobalProtect interfaces to exploit this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h2; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers with Prisma Access 2.1 Preferred and Prisma Access 2.1 Innovation firewalls are impacted by this issue.","2021-11-10",8.1,"v3.1","High",0.32516,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":64,"cvssVersion":58,"severity":59,"isKev":4,"epssScore":65},"CVE-2024-3393","A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.",7.5,0.2912,{"cveId":67,"description":68,"publishedDate":56,"cvssScore":69,"cvssVersion":58,"severity":59,"isKev":18,"epssScore":70},"CVE-2021-3061","An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator with access to the CLI to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h2; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers that have Prisma Access 2.1 firewalls are impacted by this issue.",7.2,0.00859,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":58,"severity":76,"isKev":18,"epssScore":77},"CVE-2022-0011","PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom URL category list or by using an external dynamic list (EDL) in a URL Filtering profile. When the entries in these lists have a hostname pattern that does not end with a forward slash (\u002F) or a hostname pattern that ends with an asterisk (*), any URL that starts with the specified pattern is considered a match. Entries with a caret (^) at the end of a hostname pattern match any top level domain. This may inadvertently allow or block more URLs than intended and allowing more URLs than intended represents a security risk. For example: example.com will match example.com.website.test example.com.* will match example.com.website.test example.com.^ will match example.com.test You should take special care when using such entries in policy rules that allow traffic. Where possible, use the exact list of hostname names ending with a forward slash (\u002F) instead of using wildcards. PAN-OS 10.1 versions earlier than PAN-OS 10.1.3; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 9.1 versions earlier than PAN-OS 9.1.12; all PAN-OS 9.0 versions; PAN-OS 8.1 versions earlier than PAN-OS 8.1.21, and Prisma Access 2.2 and 2.1 versions do not allow customers to change this behavior without changing the URL category list or EDL.","2022-02-10",6.5,"Medium",0.00663,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":83,"severity":76,"isKev":18,"epssScore":84},"CVE-2024-8687","An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.","2024-09-11",6.9,"v4.0",0.00409,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":58,"severity":76,"isKev":18,"epssScore":90},"CVE-2024-3388","A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.","2024-04-10",4.1,0.00349,[92],{"cveId":62,"description":63,"publishedDate":12,"cvssScore":64,"severity":59,"isKev":4,"epssScore":65,"cisaVulnName":93,"cisaDateAdded":94,"cisaShortDescription":95,"cisaRequiredAction":96},"Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","2024-12-30","Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":98,"metaDescription":99,"keywords":100,"structuredData":101},"Prisma Access by Paloaltonetworks - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Prisma Access by Paloaltonetworks covering 11 versions with 6 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Prisma Access vulnerabilities, Prisma Access security, Prisma Access CVE, Paloaltonetworks Prisma Access, Prisma Access threat intelligence, Paloaltonetworks security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Prisma Access KEV, Prisma Access exploited vulnerabilities",{"@context":102,"@type":103,"name":104,"description":99,"url":105,"manufacturer":106,"applicationCategory":110,"softwareVersion":111,"mainEntity":112},"https:\u002F\u002Fschema.org","SoftwareApplication","Prisma Access","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fpaloaltonetworks\u002Fprisma_access",{"@type":107,"name":108,"url":109},"Organization","Paloaltonetworks","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpaloaltonetworks","Security Software","11 versions tracked",{"@type":113,"name":114,"description":115,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Prisma Access Security Vulnerabilities","Security vulnerabilities affecting Prisma Access by Paloaltonetworks",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":117,"apiVersion":118},"2026-10-17T11:45:04.319Z","3.0",[],{"rows":121,"total":11,"capped":18,"failed":17},[122],{"cveId":62,"name":93,"severity":59,"cvss":64,"added":94,"epss":65,"published":123,"ranges":124,"checked":4,"hits":125,"covers":18},"2024-12-27T10:15:17.27",[],[]]