Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Palo Alto Clear all filters
TI-2019-01202 CVE-2019-1575 · GHSA-mxj5-9849-29f5

Information disclosure in Palo Alto Networks PAN-OS

Priority MEDIUM 41

Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges to extract the API k…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01652 Published 2019-07-16 No fix listed CWE-200
TI-2019-01203 CVE-2019-1576 · GHSA-m6v4-pwvx-9jc9

OS command injection in Palo Alto Networks PAN-OS

Priority MEDIUM 42

Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s permissions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01846 Published 2019-07-16 No fix listed CWE-78
TI-2019-01198 CVE-2019-1571 · GHSA-4qhh-6cpg-6632

Cross-site scripting in Palo Alto Networks Expedition Migration Tool

Priority LOW 24

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01063 Published 2019-03-26 No fix listed CWE-79
TI-2019-01197 CVE-2019-1570 · GHSA-cc8g-5rh7-vpvx

Cross-site scripting in Palo Alto Networks Expedition Migration Tool

Priority LOW 24

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01063 Published 2019-03-26 No fix listed CWE-79
TI-2019-01196 CVE-2019-1569 · GHSA-9pjf-9xvp-88xx

Cross-site scripting in Palo Alto Networks Expedition Migration Tool

Priority LOW 24

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01063 Published 2019-03-26 No fix listed CWE-79
TI-2012-03458 CVE-2012-4043 · GHSA-p78h-4qc6-4r6g

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote att…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01404 Published 2012-07-26 No fix listed CWE-79
TI-2009-02514 CVE-2009-2631 · GHSA-jvhh-4rp5-cfmm

Clientless SSL VPN products break web browser domain-based security models

Priority LOW 38

Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access;…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04823 Published 2009-12-04 No fix listed CWE-284