Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Palo Alto Networks PAN-OS 10.0.8, 10.1.3 and 3 more versions Clear all filters
TI-2021-02199 CVE-2021-3061 · GHSA-xj9p-2g8h-8rmg

PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)

Priority LOW 33

An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator with access to the CLI to execute arbitrary OS commands to escalate privileges.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00859 Published 2021-11-10 Fixed in 8.1.20-h1, 9.0.14-h3 +4 CWE-78
TI-2021-02198 CVE-2021-3060 · GHSA-xhxm-4vx2-mf6c

PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)

Priority MEDIUM 60

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.32516 Published 2021-11-10 Fixed in 8.1.20-h1, 9.0.14-h3 +4 CWE-78
TI-2021-02196 CVE-2021-3058 · GHSA-jr79-8rh7-gxxh

PAN-OS: OS Command Injection Vulnerability in Web Interface XML API

Priority MEDIUM 41

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permissions to use XML API the ability to execute arbitrary OS commands to escalate privile…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01649 Published 2021-11-10 Fixed in 10.1.3, 9.0.14-h3 +5 CWE-78