Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks PAN-OS 8.1.13, 9.0.7, 9.1* Clear all filters
TI-2020-01943 CVE-2020-2028 · GHSA-r7r8-xqc4-gqff

PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification

Priority LOW 35

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01783 Published 2020-06-10 Fixed in 8.1.13, 9.0.7 +1 CWE-78
TI-2020-01942 CVE-2020-2027 · GHSA-xp27-mhxx-q8mf

PAN-OS: Buffer overflow in authd authentication response

Priority LOW 36

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02132 Published 2020-06-10 Fixed in 8.1.13, 9.0.7 +1 CWE-121