Palo Alto Networks vulnerabilities, page 5

365 vulnerabilities

Known vulnerabilities in Palo Alto Networks products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 54 products.

6.3MediumCVE-2025-0139palo alto networks · autonomous digital experience managerAutonomous Digital Experience Manager: Privilege Escalation (PE) VulnerabilityAn incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints to escalate their privileges to root.EPSS0.15%9.3CriticalCVE-2025-0129palo alto networks · prisma access browserPrisma Access Browser: Inappropriate control behavior in Prisma Access BrowserAn improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.EPSS0.18%6.9MediumCVE-2025-0109palo alto networks · pan-osPAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web InterfaceAn unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include system files. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software.EPSS0.63%6.9MediumCVE-2025-0125palo alto networks · pan-osPAN-OS: Improper Neutralization of Input in the Management Web InterfaceAn improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW and all Prisma® Access instances.EPSS0.42%8.4HighCVE-2025-0141palo alto networks · globalprotect appGlobalProtect App: Privilege Escalation (PE) VulnerabilityAn incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.EPSS0.18%7.1HighCVE-2025-0120palo alto networks · globalprotect app +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityA vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.EPSS0.16%5.3MediumCVE-2025-0136palo alto networks · pan-osPAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devicesUsing the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec. This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls. NOTE: The AES-128-CCM encryption algorithm is not recommended for use.EPSS0.17%7.1HighCVE-2025-0111palo alto networks · pan-os +1 morePAN-OS: Authenticated File Read Vulnerability in the Management Web InterfaceAn authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software.KEVEPSS2.00%6.8MediumCVE-2025-0140palo alto networks · globalprotect appGlobalProtect App: Non Admin User Can Disable the GlobalProtect AppAn incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.EPSS0.15%6.9MediumCVE-2025-0106palo alto networks · expedition +1 moreExpedition: Wildcard Expansion VulnerabilityA wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem.EPSS0.47%6.8MediumCVE-2025-0121palo alto networks · cortex xdr agentCortex XDR Agent: Local Windows User Can Crash the AgentA null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.EPSS0.17%9.1CriticalCVE-2025-0105palo alto networks · expedition +1 moreExpedition: Arbitrary File Deletion VulnerabilityAn arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.EPSS13.19%5.1MediumCVE-2025-0122palo alto networks · prisma sd-wanPrisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted PacketsA denial-of-service (DoS) vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device.EPSS0.27%2LowCVE-2025-0138palo alto networks · prisma cloud compute editionPrisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web InterfaceWeb sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue.EPSS0.37%6.9MediumCVE-2025-0132palo alto networks · cortex xdr broker vmCortex XDR Broker VM: Unauthenticated User Can Disable Internal ServicesA missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.  The attacker must have network access to the Broker VM to exploit this issue.EPSS0.46%5.2MediumCVE-2025-0135palo alto networks · globalprotect app +1 moreGlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect AppAn incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.EPSS0.14%6.8MediumCVE-2025-0116palo alto networks · pan-osPAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP FrameA Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance mode. This issue does not apply to Cloud NGFWs or Prisma Access software.EPSS0.24%1.1LowCVE-2025-4616palo alto networks · prisma browserPrisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma BrowserAn insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.EPSS0.12%5.1MediumCVE-2025-4233palo alto networks · prisma access browserPrisma Access Browser: Inappropriate implementation in CacheAn insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies.EPSS0.19%4.6MediumCVE-2025-4228palo alto networks · cortex xdr broker vmCortex XDR Broker VM: Privilege Escalation (PE) VulnerabilityAn incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.EPSS0.19%