paloaltonetworks

310 tracked vulnerabilities.

CVE-2020-1991 HIGH
Palo Alto Networks Traps <5.0.8-6.1.4 - Privilege Escalation
Apr 08, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-1990 HIGH
PAN-OS 8.1.0-8.1.12 - Authenticated Stack-based Buffer Overflow via Corrupted Configuration Upload
Apr 08, 2020
CVSS 7.2
EPSS 0.01
CVE-2020-1989 HIGH
Palo Alto Networks GlobalProtect Agent for Linux < 5.0.8 - Authenticated Privilege Escalation via Application File Write
Apr 08, 2020
CVSS 7.0
EPSS 0.00
CVE-2020-1988 MEDIUM
Palo Alto Networks GlobalProtect Agent <5.0.5-4.1.13 - Privilege Es...
Apr 08, 2020
CVSS 4.2
EPSS 0.00
CVE-2020-1987 LOW
GlobalProtect 5.0-5.0.8 - Authenticated VPN Cookie Exposure via Troubleshooting Log Level
Apr 08, 2020
CVSS 3.9
EPSS 0.00
CVE-2020-1986 MEDIUM
Secdo - Authenticated Denial of Service via Improper Input Validation
Apr 08, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-1985 HIGH
Secdo - Incorrect Default Permissions in Logs Folder
Apr 08, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-1984 HIGH
Secdo - Privilege Escalation via Hardcoded Script Path
Apr 08, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-1978 MEDIUM
Palo Alto Networks VM-Series < 1.0.9 - Insufficiently Protected Azure Dashboard Credentials in TechSupport Files
Apr 08, 2020
CVSS 5.8
EPSS 0.00
CVE-2020-1981 HIGH
PAN-OS 8.1.0-8.1.12 - Local Privilege Escalation via Predictable Temporary Filename
Mar 11, 2020
CVSS 7.0
EPSS 0.00
CVE-2020-1980 HIGH
PAN-OS 8.1.0-8.1.12 - Authenticated OS Command Injection via CLI
Mar 11, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-1979 HIGH
PAN-OS < 8.1.13 - Remote Code Execution via Format String in Log Daemon
Mar 11, 2020
CVSS 8.1
EPSS 0.00
CVE-2020-1977 HIGH
Expedition Migration Tool < 1.1.51 - Unauthenticated Cross-Site Request Forgery
Feb 12, 2020
CVSS 7.5
EPSS 0.00
CVE-2020-1976 MEDIUM
GlobalProtect 5.0-5.0.5 - Authenticated Denial of Service
Feb 12, 2020
CVSS 4.7
EPSS 0.00
CVE-2020-1975 MEDIUM
PAN-OS 8.1.0-8.1.11 - Authenticated XML External Entity Injection in Web Interface
Feb 12, 2020
CVSS 6.8
EPSS 0.00
CVE-2019-17440 CRITICAL
PAN-OS <9.0.5-h3 - Privilege Escalation
Dec 20, 2019
CVSS 10.0
EPSS 0.00
CVE-2019-17437 HIGH
PAN-OS 7.1.0-7.1.24 - Authenticated Privilege Escalation
Dec 05, 2019
CVSS 7.8
EPSS 0.00
CVE-2019-17436 HIGH
GlobalProtect < 5.0.4 - Local Privilege Escalation via File Overwrite
Oct 16, 2019
CVSS 7.1
EPSS 0.00
CVE-2019-17435 MEDIUM
GlobalProtect Agent for Windows < 5.0.3 - Local Privilege Escalation via Auto-Update MSI Installer Modification
Oct 16, 2019
CVSS 5.5
EPSS 0.00
CVE-2019-1583 HIGH
Palo Alto Networks Twistlock <19.07.358 - Privilege Escalation
Aug 23, 2019
CVSS 8.0
EPSS 0.00
CVE-2019-1582 HIGH
PAN-OS <8.1.9 & <9.0.3 - Memory Corruption
Aug 23, 2019
CVSS 7.2
EPSS 0.01
CVE-2019-1581 CRITICAL
PAN-OS <7.1.24-h1, 7.1.25; 8.0 <8.0.19-h1, 8.0.20; 8.1 <8.1.9-h4, 8...
Aug 23, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-1580 CRITICAL
PAN-OS <7.1.24, <8.0.19, <8.1.9, <9.0.3 - Memory Corruption
Aug 23, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-1579 HIGH KEV
PAN-OS < 7.1.19 - Unauthenticated Remote Code Execution via GlobalProtect Portal/Gateway Interface
Jul 19, 2019
CVSS 8.1
EPSS 0.93
CVE-2019-1576 HIGH
PAN-OS < 9.0.2 - Authenticated OS Command Injection
Jul 16, 2019
CVSS 8.8
EPSS 0.05
Products
pan-os 211 globalprotect 34 cortex_xdr_agent 19 expedition 16 cortex_xsoar 9 prisma_access 7 prisma_cloud 4 expedition_migration_tool 3 secdo 3 terminal_services_agent 3 traps 3 bridgecrew_checkov 2 cortex_xsoar_commonscripts 1 demisto 1 minemeld 1 netconnect 1 twistlock 1 vm-series 1
Quick Filters
Critical CVEs With Exploits In CISA KEV