Paloaltonetworks vulnerabilities
379 vulnerabilities
Known vulnerabilities in Paloaltonetworks products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 39 products.
Products
39- Pan Os235 vulnerabilities
- Globalprotect42 vulnerabilities
- Cortex Xdr Agent20 vulnerabilities
- Expedition16 vulnerabilities
- Prisma Access Agent12 vulnerabilities
- Cortex Xsoar11 vulnerabilities
- Prisma Access9 vulnerabilities
- Prisma Browser6 vulnerabilities
- Prisma Cloud4 vulnerabilities
- Expedition Migration Tool3 vulnerabilities
- Idira Endpoint Privilege Manager3 vulnerabilities
- Terminal Services Agent3 vulnerabilities
- Traps3 vulnerabilities
- Bridgecrew Checkov2 vulnerabilities
- Prisma Sd Wan2 vulnerabilities
- Trust Protection Foundation2 vulnerabilities
- Autonomous Digital Experience Manager1 vulnerabilities
- Broker Vm1 vulnerabilities
- Chronosphere Collector1 vulnerabilities
- Cloud Ng1 vulnerabilities
- Cortex Xdr Broker Vm1 vulnerabilities
- Cortex Xsiam1 vulnerabilities
- Cortex Xsiam Commvaultsecurityiq Marketplace1 vulnerabilities
- Cortex Xsoar Commonscripts1 vulnerabilities
- Cortex Xsoar Commvaultsecurityiq Marketplace1 vulnerabilities
- Demisto1 vulnerabilities
- Idira Identity Browser Extension1 vulnerabilities
- Idira Privilege Cloud Connector1 vulnerabilities
- Idira Privileged Access Manager Vault1 vulnerabilities
- Idira Privileged Session Manager1 vulnerabilities
- Idira Privileged Session Manager For Ssh1 vulnerabilities
- Idira Secrets Manager1 vulnerabilities
- Idira Secrets Manager Credential Providers1 vulnerabilities
- Idira Secrets Manager Edge1 vulnerabilities
- Minemeld1 vulnerabilities
- Netconnect1 vulnerabilities
- Twistlock1 vulnerabilities
- Vm Series1 vulnerabilities
- Secdo0 vulnerabilities
CVE-2026-0322palo alto networkspan-os+1KEV
EPSS score1.21%
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma® Access are not impacted by this vulnerability.CVE-2018-9337paloaltonetworkspan-osEPSS score1.01%
The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML.CVE-2018-9242paloaltonetworkspan-osEPSS score0.43%
The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier may allow an attacker to delete files in the system via specific request parameters.CVE-2018-9335paloaltonetworkspan-osEPSS score1.01%
The PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML.CVE-2018-9334paloaltonetworkspan-osEPSS score0.36%
The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.8 and earlier, and PAN-OS 8.1.0 may allow an attacker to access the GlobalProtect password hashes of local users via manipulation of the HTML markup.CVE-2018-14634canonicalubuntu_linux+86KEVEPSS score14.69%
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.CVE-2018-7636paloaltonetworkspan-osEPSS score1.08%
The URL filtering "continue page" hosted by PAN-OS 8.0.10 and earlier may allow an attacker to inject arbitrary JavaScript or HTML via specially crafted URLs.CVE-2018-18065canonicalubuntu_linux+24EPSS score17.50%
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.CVE-2018-10141palo alto networkspalo alto networks+1EPSS score3.88%
GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML.CVE-2018-10142palo alto networkspalo alto networks expedition+1EPSS score2.16%
The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system.CVE-2018-10143palo alto networkspalo alto networks expedition+1EPSS score24.85%
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.CVE-2018-10140palo alto networkspan-os+1EPSS score1.93%
The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page. PAN-OS 6.1, PAN-OS 7.1 and PAN-OS 8.0 are NOT affected.CVE-2018-10139palo alto networkspan-os+1EPSS score1.52%
The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected.CVE-2013-5664paloaltonetworkspan-osEPSS score2.29%
Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.CVE-2013-5663paloaltonetworkspan-osEPSS score2.82%
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.CVE-2021-3055palo alto networkspan-os+1EPSS score1.07%
An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system and send a specifically crafted request to the firewall that causes the service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.10; PAN-OS 10.0 versions earlier than PAN-OS 10.0.6. This issue does not affect Prisma Access.CVE-2021-3034palo alto networkscortex xsoar+1EPSS score0.17%
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.CVE-2021-3058palo alto networkspan-os+1EPSS score1.65%
An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permissions to use XML API the ability to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h2; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. This issue does not impact Prisma Access firewalls.CVE-2021-3045palo alto networkspan-os+1EPSS score0.79%
An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.10. PAN-OS 10.0 and later versions are not impacted.CVE-2021-3042palo alto networkscortex xdr agent+1EPSS score0.25%
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges. Exploiting this vulnerability requires the user to have file creation privilege in the Windows root directory (such as C:\). This issue impacts: All versions of Cortex XDR agent 6.1 without content update 181 or a later version; All versions of Cortex XDR agent 7.2 without content update 181 or a later version; All versions of Cortex XDR agent 7.3 without content update 181 or a later version. Cortex XDR agent 5.0 versions are not impacted by this issue. Content updates are required to resolve this issue and are automatically applied for the agent.