Read the docs

Palo Alto

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Palo Alto records in CISA KEV

No Palo Alto vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Global Protected Gateway 1 record LOW Networks 1 record LOW Ssl Vpn 1 record LOW

Records

7 records

TI-2019-01203 CVE-2019-1576 · GHSA-m6v4-pwvx-9jc9

OS command injection in Palo Alto Networks PAN-OS

Priority MEDIUM 42

Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s permissions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01846 Published 2019-07-16 No fix listed CWE-78
TI-2019-01202 CVE-2019-1575 · GHSA-mxj5-9849-29f5

Information disclosure in Palo Alto Networks PAN-OS

Priority MEDIUM 41

Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges to extract the API k…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01652 Published 2019-07-16 No fix listed CWE-200
TI-2009-02514 CVE-2009-2631 · GHSA-jvhh-4rp5-cfmm

Clientless SSL VPN products break web browser domain-based security models

Priority LOW 38

Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access;…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04823 Published 2009-12-04 No fix listed CWE-284
TI-2019-01198 CVE-2019-1571 · GHSA-4qhh-6cpg-6632

Cross-site scripting in Palo Alto Networks Expedition Migration Tool

Priority LOW 24

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01063 Published 2019-03-26 No fix listed CWE-79
TI-2019-01197 CVE-2019-1570 · GHSA-cc8g-5rh7-vpvx

Cross-site scripting in Palo Alto Networks Expedition Migration Tool

Priority LOW 24

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01063 Published 2019-03-26 No fix listed CWE-79
TI-2019-01196 CVE-2019-1569 · GHSA-9pjf-9xvp-88xx

Cross-site scripting in Palo Alto Networks Expedition Migration Tool

Priority LOW 24

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01063 Published 2019-03-26 No fix listed CWE-79
TI-2012-03458 CVE-2012-4043 · GHSA-p78h-4qc6-4r6g

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote att…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01404 Published 2012-07-26 No fix listed CWE-79
Open these records in search →