[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg3VBYow2TKnJWsddSHst9LoqMQTuSIzU7wtDksgaNp8":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":256,"kevVulnerabilities":317,"topProductsByCves":396,"seoMetadata":407,"meta":416},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":255},23560,"paloaltonetworks",67,292,14,915,"2025-10-09","p",[16,22,29,34,39,44,50,56,60,64,67,72,76,81,85,88,91,95,98,103,106,109,112,116,120,124,128,132,135,138,141,144,147,150,153,156,159,162,165,168,172,175,179,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},125576,"pan-os",324,204,11,{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},125534,"globalprotect",69,28,0,"2024-10-09",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":27,"last_cve_update":28},125527,"cortex_xdr_agent",59,19,{"id":35,"product_name":36,"version_count":37,"cve_count":21,"kev_count":38,"last_cve_update":28},125531,"expedition",229,3,{"id":40,"product_name":41,"version_count":21,"cve_count":42,"kev_count":27,"last_cve_update":43},125528,"cortex_xsoar",9,"2023-11-08",{"id":45,"product_name":46,"version_count":21,"cve_count":47,"kev_count":48,"last_cve_update":49},125577,"prisma_access",6,1,"2024-12-27",{"id":51,"product_name":52,"version_count":53,"cve_count":54,"kev_count":27,"last_cve_update":55},125578,"prisma_cloud",36,4,"2024-06-12",{"id":57,"product_name":58,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":59},125579,"secdo","2020-04-08",{"id":61,"product_name":62,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":63},125568,"pa-7080","2024-04-10",{"id":65,"product_name":66,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":63},125567,"pa-7050",{"id":68,"product_name":69,"version_count":70,"cve_count":38,"kev_count":27,"last_cve_update":71},125532,"expedition_migration_tool",13,"2020-02-12",{"id":73,"product_name":74,"version_count":75,"cve_count":38,"kev_count":27,"last_cve_update":59},125581,"traps",8,{"id":77,"product_name":78,"version_count":79,"cve_count":38,"kev_count":27,"last_cve_update":80},125580,"terminal_services_agent",5,"2017-03-20",{"id":82,"product_name":83,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":63},125561,"pa-5410",2,{"id":86,"product_name":87,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":63},125562,"pa-5420",{"id":89,"product_name":90,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":63},125563,"pa-5430",{"id":92,"product_name":93,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":94},125574,"panorama_m-600","2024-02-14",{"id":96,"product_name":97,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":94},125572,"panorama_m-200",{"id":99,"product_name":100,"version_count":101,"cve_count":84,"kev_count":27,"last_cve_update":102},125526,"bridgecrew_checkov",142,"2021-06-10",{"id":104,"product_name":105,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":94},125573,"panorama_m-500",{"id":107,"product_name":108,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":63},125565,"pa-5445",{"id":110,"product_name":111,"version_count":27,"cve_count":84,"kev_count":27,"last_cve_update":63},125564,"pa-5440",{"id":113,"product_name":114,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125551,"pa-3260","2021-01-13",{"id":117,"product_name":118,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":119},125529,"cortex_xsoar_commonscripts","2024-08-14",{"id":121,"product_name":122,"version_count":48,"cve_count":48,"kev_count":27,"last_cve_update":123},125530,"demisto","2019-05-09",{"id":125,"product_name":126,"version_count":48,"cve_count":48,"kev_count":27,"last_cve_update":127},125539,"minemeld","2019-07-01",{"id":129,"product_name":130,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":131},125540,"netconnect","2013-08-31",{"id":133,"product_name":134,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125541,"pa-200",{"id":136,"product_name":137,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125542,"pa-2020",{"id":139,"product_name":140,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125543,"pa-2050",{"id":142,"product_name":143,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125544,"pa-220",{"id":145,"product_name":146,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125546,"pa-3020",{"id":148,"product_name":149,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125547,"pa-3050",{"id":151,"product_name":152,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125548,"pa-3060",{"id":154,"product_name":155,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125549,"pa-3220",{"id":157,"product_name":158,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125550,"pa-3250",{"id":160,"product_name":161,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125552,"pa-500",{"id":163,"product_name":164,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125556,"pa-5200",{"id":166,"product_name":167,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":115},125569,"pa-800",{"id":169,"product_name":170,"version_count":84,"cve_count":48,"kev_count":27,"last_cve_update":171},125582,"twistlock","2019-08-23",{"id":173,"product_name":174,"version_count":38,"cve_count":48,"kev_count":27,"last_cve_update":59},125590,"vm-series",{"id":176,"product_name":177,"version_count":27,"cve_count":48,"kev_count":27,"last_cve_update":178},125591,"vm-series_firewall","2021-11-10",{"id":180,"product_name":181,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125557,"pa-5220",null,{"id":184,"product_name":185,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125589,"vm-700",{"id":187,"product_name":188,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125570,"pa-820",{"id":190,"product_name":191,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125571,"pa-850",{"id":193,"product_name":194,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125555,"pa-5060",{"id":196,"product_name":197,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125554,"pa-5050",{"id":199,"product_name":200,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125553,"pa-5020",{"id":202,"product_name":203,"version_count":48,"cve_count":27,"kev_count":27,"last_cve_update":182},125575,"panorama_virtual_appliance",{"id":205,"product_name":206,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125545,"pa-220r",{"id":208,"product_name":209,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125538,"m-600",{"id":211,"product_name":212,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125537,"m-500",{"id":214,"product_name":215,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125536,"m-200",{"id":217,"product_name":218,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125535,"m-100",{"id":220,"product_name":221,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125533,"firewall",{"id":223,"product_name":224,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125592,"wf-500",{"id":226,"product_name":227,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125583,"vm-100",{"id":229,"product_name":230,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125584,"vm-1000-hv",{"id":232,"product_name":233,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125585,"vm-200",{"id":235,"product_name":236,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125586,"vm-300",{"id":238,"product_name":239,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125587,"vm-50",{"id":241,"product_name":242,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125588,"vm-500",{"id":244,"product_name":245,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125560,"pa-5280",{"id":247,"product_name":248,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125559,"pa-5260",{"id":250,"product_name":251,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125566,"pa-7000",{"id":253,"product_name":254,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":182},125558,"pa-5250","Paloaltonetworks is a technology vendor with 67 tracked products and 292 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[257,265,271,277,282,288,293,299,305,311],{"cveId":258,"description":259,"publishedDate":260,"cvssScore":261,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":264},"CVE-2024-3400","A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.\n\nCloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.","2024-04-12",10,"v3.1","Critical",0.99999,{"cveId":266,"description":267,"publishedDate":268,"cvssScore":269,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":270},"CVE-2024-0012","An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like  CVE-2024-9474 https:\u002F\u002Fsecurity.paloaltonetworks.com\u002FCVE-2024-9474 .\n\nThe risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https:\u002F\u002Flive.paloaltonetworks.com\u002Ft5\u002Fcommunity-blogs\u002Ftips-amp-tricks-how-to-secure-the-management-access-of-your-palo\u002Fba-p\u002F464431 .\n\nThis issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software.\n\nCloud NGFW and Prisma Access are not impacted by this vulnerability.","2024-11-18",9.8,0.99855,{"cveId":272,"description":273,"publishedDate":28,"cvssScore":274,"cvssVersion":275,"severity":263,"isKev":4,"epssScore":276},"CVE-2024-9465","An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.",9.2,"v4.0",0.99626,{"cveId":278,"description":279,"publishedDate":28,"cvssScore":280,"cvssVersion":275,"severity":263,"isKev":4,"epssScore":281},"CVE-2024-9463","An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.",9.9,0.98546,{"cveId":283,"description":284,"publishedDate":285,"cvssScore":286,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":287},"CVE-2025-0108","An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS.\n\nYou can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practices deployment guidelines https:\u002F\u002Flive.paloaltonetworks.com\u002Ft5\u002Fcommunity-blogs\u002Ftips-amp-tricks-how-to-secure-the-management-access-of-your-palo\u002Fba-p\u002F464431 .\n\nThis issue does not affect Cloud NGFW or Prisma Access software.","2025-02-12",9.1,0.98455,{"cveId":289,"description":290,"publishedDate":291,"cvssScore":269,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":292},"CVE-2017-15944","Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.","2017-12-11",0.9834,{"cveId":294,"description":295,"publishedDate":268,"cvssScore":296,"cvssVersion":262,"severity":297,"isKev":4,"epssScore":298},"CVE-2024-9474","A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges.\n\nCloud NGFW and Prisma Access are not impacted by this vulnerability.",7.2,"High",0.94824,{"cveId":300,"description":301,"publishedDate":302,"cvssScore":303,"cvssVersion":275,"severity":263,"isKev":4,"epssScore":304},"CVE-2024-5910","Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\n\nNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.","2024-07-10",9.3,0.91684,{"cveId":306,"description":307,"publishedDate":308,"cvssScore":296,"cvssVersion":262,"severity":297,"isKev":309,"epssScore":310},"CVE-2020-2038","An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1.","2020-09-09",false,0.86086,{"cveId":312,"description":313,"publishedDate":314,"cvssScore":315,"cvssVersion":262,"severity":297,"isKev":4,"epssScore":316},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",7,0.83524,[318,328,332,340,344,348,352,355,359,363,373,377,384,388],{"cveId":319,"description":320,"publishedDate":285,"cvssScore":321,"cvssVersion":262,"severity":322,"isKev":4,"epssScore":323,"cisaVulnName":324,"cisaDateAdded":325,"cisaShortDescription":326,"cisaRequiredAction":327},"CVE-2025-0111","An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.\n\nYou can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practices deployment guidelines https:\u002F\u002Flive.paloaltonetworks.com\u002Ft5\u002Fcommunity-blogs\u002Ftips-amp-tricks-how-to-secure-the-management-access-of-your-palo\u002Fba-p\u002F464431 .\n\n\n\nThis issue does not affect Cloud NGFW or Prisma Access software.",6.5,"Medium",0.01999,"Palo Alto Networks PAN-OS File Read Vulnerability","2025-02-20","Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":283,"description":284,"publishedDate":285,"cvssScore":286,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":287,"cisaVulnName":329,"cisaDateAdded":330,"cisaShortDescription":331,"cisaRequiredAction":327},"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","2025-02-18","Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.",{"cveId":333,"description":334,"publishedDate":49,"cvssScore":335,"cvssVersion":262,"severity":297,"isKev":4,"epssScore":336,"cisaVulnName":337,"cisaDateAdded":338,"cisaShortDescription":339,"cisaRequiredAction":327},"CVE-2024-3393","A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.",7.5,0.2912,"Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","2024-12-30","Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.",{"cveId":266,"description":267,"publishedDate":268,"cvssScore":269,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":270,"cisaVulnName":341,"cisaDateAdded":268,"cisaShortDescription":342,"cisaRequiredAction":343},"Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.",{"cveId":294,"description":295,"publishedDate":268,"cvssScore":296,"cvssVersion":262,"severity":297,"isKev":4,"epssScore":298,"cisaVulnName":345,"cisaDateAdded":268,"cisaShortDescription":346,"cisaRequiredAction":347},"Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.",{"cveId":278,"description":279,"publishedDate":28,"cvssScore":280,"cvssVersion":275,"severity":263,"isKev":4,"epssScore":281,"cisaVulnName":349,"cisaDateAdded":350,"cisaShortDescription":351,"cisaRequiredAction":327},"Palo Alto Networks Expedition OS Command Injection Vulnerability","2024-11-14","Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.",{"cveId":272,"description":273,"publishedDate":28,"cvssScore":274,"cvssVersion":275,"severity":263,"isKev":4,"epssScore":276,"cisaVulnName":353,"cisaDateAdded":350,"cisaShortDescription":354,"cisaRequiredAction":327},"Palo Alto Networks Expedition SQL Injection Vulnerability","Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.",{"cveId":300,"description":301,"publishedDate":302,"cvssScore":303,"cvssVersion":275,"severity":263,"isKev":4,"epssScore":304,"cisaVulnName":356,"cisaDateAdded":357,"cisaShortDescription":358,"cisaRequiredAction":327},"Palo Alto Networks Expedition Missing Authentication Vulnerability","2024-11-07","Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.",{"cveId":258,"description":259,"publishedDate":260,"cvssScore":261,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":264,"cisaVulnName":360,"cisaDateAdded":260,"cisaShortDescription":361,"cisaRequiredAction":362},"Palo Alto Networks PAN-OS Command Injection Vulnerability","Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.","Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.",{"cveId":364,"description":365,"publishedDate":366,"cvssScore":367,"cvssVersion":262,"severity":297,"isKev":4,"epssScore":368,"cisaVulnName":369,"cisaDateAdded":370,"cisaShortDescription":371,"cisaRequiredAction":372},"CVE-2022-0028","A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container) firewall against an attacker-specified target. To be misused by an external attacker, the firewall configuration must have a URL filtering profile with one or more blocked categories assigned to a source zone that has an external facing interface. This configuration is not typical for URL filtering and, if set, is likely unintended by the administrator. If exploited, this issue would not impact the confidentiality, integrity, or availability of our products. However, the resulting denial-of-service (DoS) attack may help obfuscate the identity of the attacker and implicate the firewall as the source of the attack. We have taken prompt action to address this issue in our PAN-OS software. All software updates for this issue are expected to be released no later than the week of August 15, 2022. This issue does not impact Panorama M-Series or Panorama virtual appliances. This issue has been resolved for all Cloud NGFW and Prisma Access customers and no additional action is required from them.","2022-08-10",8.6,0.02542,"Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability","2022-08-22","A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.","Apply updates per vendor instructions.",{"cveId":289,"description":290,"publishedDate":291,"cvssScore":269,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":292,"cisaVulnName":374,"cisaDateAdded":375,"cisaShortDescription":376,"cisaRequiredAction":372},"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","2022-08-18","Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained.",{"cveId":378,"description":379,"publishedDate":380,"cvssScore":261,"cvssVersion":262,"severity":263,"isKev":4,"epssScore":381,"cisaVulnName":329,"cisaDateAdded":382,"cisaShortDescription":383,"cisaRequiredAction":372},"CVE-2020-2021","When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected resources. The attacker must have network access to the vulnerable server to exploit this vulnerability. This issue affects PAN-OS 9.1 versions earlier than PAN-OS 9.1.3; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; PAN-OS 8.1 versions earlier than PAN-OS 8.1.15, and all versions of PAN-OS 8.0 (EOL). This issue does not affect PAN-OS 7.1. This issue cannot be exploited if SAML is not used for authentication. This issue cannot be exploited if the 'Validate Identity Provider Certificate' option is enabled (checked) in the SAML Identity Provider Server Profile. Resources that can be protected by SAML-based single sign-on (SSO) authentication are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN, Authentication and Captive Portal, PAN-OS next-generation firewalls (PA-Series, VM-Series) and Panorama web interfaces, Prisma Access In the case of GlobalProtect Gateways, GlobalProtect Portal, Clientless VPN, Captive Portal, and Prisma Access, an unauthenticated attacker with network access to the affected servers can gain access to protected resources if allowed by configured authentication and Security policies. There is no impact on the integrity and availability of the gateway, portal or VPN server. An attacker cannot inspect or tamper with sessions of regular users. In the worst case, this is a critical severity vulnerability with a CVSS Base Score of 10.0 (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N). In the case of PAN-OS and Panorama web interfaces, this issue allows an unauthenticated attacker with network access to the PAN-OS or Panorama web interfaces to log in as an administrator and perform administrative actions. In the worst-case scenario, this is a critical severity vulnerability with a CVSS Base Score of 10.0 (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H). If the web interfaces are only accessible to a restricted management network, then the issue is lowered to a CVSS Base Score of 9.6 (CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H). Palo Alto Networks is not aware of any malicious attempts to exploit this vulnerability.","2020-06-29",0.04362,"2022-03-25","Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.",{"cveId":312,"description":313,"publishedDate":314,"cvssScore":315,"cvssVersion":262,"severity":297,"isKev":4,"epssScore":316,"cisaVulnName":385,"cisaDateAdded":386,"cisaShortDescription":387,"cisaRequiredAction":372},"Linux Kernel Race Condition Vulnerability","2022-03-03","Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":389,"description":390,"publishedDate":391,"cvssScore":392,"cvssVersion":262,"severity":297,"isKev":4,"epssScore":393,"cisaVulnName":374,"cisaDateAdded":394,"cisaShortDescription":395,"cisaRequiredAction":372},"CVE-2019-1579","Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.","2019-07-19",8.1,0.46239,"2022-01-10","Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.",[397,398,399,400,401,402,403,404,405,406],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":27,"last_cve_update":28},{"id":35,"product_name":36,"version_count":37,"cve_count":21,"kev_count":38,"last_cve_update":28},{"id":40,"product_name":41,"version_count":21,"cve_count":42,"kev_count":27,"last_cve_update":43},{"id":45,"product_name":46,"version_count":21,"cve_count":47,"kev_count":48,"last_cve_update":49},{"id":51,"product_name":52,"version_count":53,"cve_count":54,"kev_count":27,"last_cve_update":55},{"id":57,"product_name":58,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":59},{"id":61,"product_name":62,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":63},{"id":65,"product_name":66,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":63},{"title":408,"metaDescription":409,"keywords":410,"structuredData":411},"Paloaltonetworks - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Paloaltonetworks covering 67 products with 292 tracked vulnerabilities including 8 critical and 5 high-severity issues and 14 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Paloaltonetworks vulnerabilities, Paloaltonetworks security, Paloaltonetworks CVE, Paloaltonetworks threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Paloaltonetworks KEV, Paloaltonetworks exploited vulnerabilities",{"@context":412,"@type":413,"name":414,"description":409,"url":415},"https:\u002F\u002Fschema.org","Organization","Paloaltonetworks","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpaloaltonetworks",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":417,"apiVersion":418},"2026-10-17T00:34:19.232Z","3.0"]