paloaltonetworks

348 tracked vulnerabilities.

CVE-2020-1977 HIGH
Expedition Migration Tool < 1.1.51 - Unauthenticated Cross-Site Request Forgery
Feb 12, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-1976 MEDIUM
GlobalProtect 5.0-5.0.5 - Authenticated Denial of Service
Feb 12, 2020
CVSS 4.7
EPSS 0.00
CVE-2020-1975 MEDIUM
PAN-OS 8.1.0-8.1.11 - Authenticated XML External Entity Injection in Web Interface
Feb 12, 2020
CVSS 6.8
EPSS 0.01
CVE-2019-17440 CRITICAL
PAN-OS <9.0.5-h3 - Privilege Escalation
Dec 20, 2019
CVSS 10.0
EPSS 0.02
CVE-2019-17437 HIGH
PAN-OS 7.1.0-7.1.24 - Authenticated Privilege Escalation
Dec 05, 2019
CVSS 7.8
EPSS 0.00
CVE-2019-17436 HIGH
GlobalProtect < 5.0.4 - Local Privilege Escalation via File Overwrite
Oct 16, 2019
CVSS 7.1
EPSS 0.00
CVE-2019-17435 MEDIUM
GlobalProtect Agent for Windows < 5.0.3 - Local Privilege Escalation via Auto-Update MSI Installer Modification
Oct 16, 2019
CVSS 5.5
EPSS 0.00
CVE-2019-1583 HIGH
Palo Alto Networks Twistlock <19.07.358 - Privilege Escalation
Aug 23, 2019
CVSS 8.0
EPSS 0.01
CVE-2019-1582 HIGH
PAN-OS <8.1.9 & <9.0.3 - Memory Corruption
Aug 23, 2019
CVSS 7.2
EPSS 0.01
CVE-2019-1581 CRITICAL
PAN-OS <7.1.24-h1, 7.1.25; 8.0 <8.0.19-h1, 8.0.20; 8.1 <8.1.9-h4, 8...
Aug 23, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-1580 CRITICAL
PAN-OS <7.1.24, <8.0.19, <8.1.9, <9.0.3 - Memory Corruption
Aug 23, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-1579 HIGH KEV
PAN-OS < 7.1.19 - Unauthenticated Remote Code Execution via GlobalProtect Portal/Gateway Interface
Jul 19, 2019
CVSS 8.1
EPSS 0.39
CVE-2019-1576 HIGH
PAN-OS < 9.0.2 - Authenticated OS Command Injection
Jul 16, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-1575 HIGH
PAN-OS <7.1.23, <8.0.18, <8.1.8-h4, <9.0.2 - Info Disclosure
Jul 16, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-1578 MEDIUM
Palo Alto Networks MineMeld <0.9.60 - XSS
Jul 01, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-1577 MEDIUM
Palo Alto Networks Traps <5.0.5 - Code Injection
Jul 01, 2019
CVSS 6.3
EPSS 0.01
CVE-2019-1568 MEDIUM
Palo Alto Networks Demisto <4.5.40249 - XSS
May 09, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-1574 MEDIUM
Palo Alto Networks Expedition Migration <1.1.12 - XSS
Apr 12, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-1573 LOW
GlobalProtect Agent <4.1.10 - Privilege Escalation
Apr 09, 2019
CVSS 2.5
EPSS 0.00
CVE-2019-1567 MEDIUM
Expedition Migration Tool <1.1.6 - XSS
Apr 09, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-1571 MEDIUM
Expedition Migration Tool <1.1.8 - XSS
Mar 26, 2019
CVSS 4.8
EPSS 0.01
CVE-2019-1572 HIGH
PAN-OS 9.0.0 - Unauthenticated Arbitrary File Access
Mar 26, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-1570 MEDIUM
Expedition Migration Tool <1.1.8 - XSS
Mar 26, 2019
CVSS 4.8
EPSS 0.01
CVE-2019-1569 MEDIUM
Expedition Migration Tool <1.1.8 - XSS
Mar 26, 2019
CVSS 4.8
EPSS 0.01
CVE-2019-1559 MEDIUM
OpenSSL 1.0.2-1.0.2q - Padding Oracle via SSL_shutdown Double Call
Feb 27, 2019
CVSS 5.9
EPSS 0.17
Products
pan-os 226 globalprotect 35 cortex_xdr_agent 20 expedition 16 cortex_xsoar 11 prisma_access 8 prisma_cloud 4 expedition_migration_tool 3 idira_endpoint_privilege_manager 3 secdo 3 terminal_services_agent 3 traps 3 bridgecrew_checkov 2 prisma_access_agent 2 trust_protection_foundation 2 autonomous_digital_experience_manager 1 broker_vm 1 chronosphere_collector 1 cloud_ngfw 1 cortex_xsiam 1 cortex_xsiam_commvaultsecurityiq_marketplace 1 cortex_xsoar_commonscripts 1 cortex_xsoar_commvaultsecurityiq_marketplace 1 demisto 1 idira_identity_browser_extension 1 idira_privilege_cloud_connector 1 idira_privileged_access_manager_vault 1 idira_privileged_session_manager 1 idira_privileged_session_manager_for_ssh 1 idira_secrets_manager 1
Quick Filters
Critical CVEs With Exploits In CISA KEV