Read the docs

CyberArk Software, a Palo Alto Networks Company

Records387All Threatist records
Exploited (KEV)20In CISA KEV
CVSS critical45CVSS 9.0–10.0
CVSS high137CVSS 7.0–8.9

Exploited now

CyberArk Software, a Palo Alto Networks Company records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Prisma Access · all components

Priority CRITICAL 95KEV

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the fi…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.2912 Published 2024-12-27 Fixed in All, 11.2.3 +4 CWE-754
Priority CRITICAL 93KEV

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.95642 Published 2026-05-13 Fixed in All, 12.1.7 +17 CWE-565
Priority MEDIUM 60

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.32516 Published 2021-11-10 Fixed in 8.1.20-h1, 9.0.14-h3 +4 CWE-78
Priority LOW 33

An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator with access to the CLI to execute arbitrary OS commands to escalate privileges.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00859 Published 2021-11-10 Fixed in 8.1.20-h1, 9.0.14-h3 +4 CWE-78
Priority LOW 31

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconn…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00405 Published 2024-09-11 Fixed in 11.1.0, 11.2.0 +15 CWE-497
Priority LOW 30

PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00663 Published 2022-02-10 Fixed in 8.1.21, 9.1.12 +4 CWE-436
Priority LOW 23

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00349 Published 2024-04-10 Fixed in 8.1.26, 9.0.17-h4 +7 CWE-269
Priority LOW 10

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information.

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00559 Published 2026-08-13 Fixed in 12.1.0, 11.2.0 +3 CWE-908
Open these records in search →