PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
288
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 116Medium 106Low 17
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9242 | 5.5 | Jul 3 | The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier may allow an attacker to delete files in the system via… Affected: after 6.0.0 through 6.1.20; 7.1.0 through 7.1.16; after 8.0.0 through 8.0.9 |
| CVE-2023-0010 | 5.4 | Jun 14 | A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the… Affected: 8.1.0 through 8.1.24; 9.0.0 through 9.0.17; 9.1.0 through 9.1.16; 10.0.0 through 10.0.11; 10.1.0 through 10.1.6; 10.2.0 through 10.2.2 |
| CVE-2021-3052 | 5.4 | Sep 8 | A reflected cross-site scripting (XSS) vulnerability in the Palo Alto Network PAN-OS web interface enables an authenticated network-based attacker to mislead another authenticated… Affected: 8.1.0 before 8.1.20; 9.0.0 before 9.0.14; 9.1.0 before 9.1.10; 10.0.0 before 10.0.2 |
| CVE-2020-1993 | 5.4 | May 13 | The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 through 8.1.13; 9.0.0 through 9.0.7 |
| CVE-2019-1565 | 5.4 | Jan 30 | The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next… Affected: PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier. |
| CVE-2018-9337 | 5.4 | Jul 3 | The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker… Affected: after 6.0.0 through 6.1.20; 7.1.0 through 7.1.17; after 8.0.0 through 8.0.10; 8.1.0 through 8.1.1 |
| CVE-2018-9335 | 5.4 | Jul 3 | The PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject… Affected: after 6.0.0 through 6.1.20; 7.1.0 through 7.1.16; after 8.0.0 through 8.0.9; 8.1.0 through 8.1.1 |
| CVE-2017-5584 | 5.4 | Mar 15 | Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows… Affected: 5.1; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; +34 more |
| CVE-2016-2219 | 5.4 | Jul 12 | Cross-site scripting (XSS) vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.0.5; +2 more |
| CVE-2024-3386 | 5.3 | Apr 10 | An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended Affected: 9.0.0 before 9.0.16; 9.1.0 before 9.1.17; 10.0.0 before 10.0.13; 10.1.0 through 10.1.8; 10.2.0 before 10.2.4; 11.0.0 before 11.0.1; +6 more |
| CVE-2020-1999 | 5.3 | Nov 12 | A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.17; 9.0.0 before 9.0.11; 9.1.0 before 9.1.5 |
| CVE-2020-2039 | 5.3 | Sep 9 | An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web… Affected: 8.1.0 before 8.1.16; 9.0.0 before 9.0.10; 9.1.0 before 9.1.4; 10.0.0 before 10.0.1 |
| CVE-2020-2033 | 5.3 | Jun 10 | When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication cookie to a… Affected: 5.0.0 before 5.0.10; 5.1.0 before 5.1.4 |
| CVE-2020-1996 | 5.3 | May 13 | A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 through 8.1.13; 9.0.0 through 9.0.8 |
| CVE-2017-15943 | 5.3 | Dec 11 | The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before… Affected: before 6.1.19; 7.0.0 before 7.0.19; 7.1.0 before 7.1.14 |
| CVE-2024-3388 | 5.0 | Apr 10 | A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to… Affected: 8.1.0 before 8.1.26; 9.0.0 before 9.0.17; 9.1.0 before 9.1.17; 10.1.0 before 10.1.11; 10.2.0 before 10.2.7; 11.0.0 before 11.0.3; +7 more |
| CVE-2026-0319 | 4.9 | Oct 14 | PAN-OS: Improper Input Handling Vulnerability Affected: 12.2.0 before 12.2.4; 12.1.0 before 12.1.10-h2; 11.2.0 before 11.2.16; 11.1.0 before 11.1.16-h3; 10.2.0 before 10.2.18-h12 |
| CVE-2026-0285 | 4.9 | Jul 9 | PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2024-5917 | 4.9 | Nov 14 | A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables… Affected: 10.1.0 before 10.1.7; 10.2.0 before 10.2.2 |
| CVE-2024-5911 | 4.9 | Jul 10 | An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system… Affected: 10.1.0 before 10.1.9; 10.2.0 before 10.2.4 |
| CVE-2023-6791 | 4.9 | Dec 13 | A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external… Affected: 8.1.0 before 8.1.24; 9.0.0 before 9.0.17; 9.1.0 before 9.1.16; 10.0.0 before 10.0.12; 10.1.0 before 10.1.9; 10.2.0 before 10.2.4; +1 more |
| CVE-2023-38046 | 4.9 | Jul 12 | A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read… Affected: 10.2.0 before 10.2.4; 11.0.0 |
| CVE-2023-0005 | 4.9 | Apr 12 | A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext values of secrets stored in the device configuration and… Affected: 8.1.0 before 8.1.24; 9.0.0 before 9.0.17; 9.1.0 before 9.1.15; 10.0.0 before 10.0.12; 10.1.0 before 10.1.8; 10.2.0 before 10.2.3 |
| CVE-2021-3045 | 4.9 | Aug 11 | An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file… Affected: 8.1.0 before 8.1.19; 9.0.0 before 9.0.14; 9.1.0 before 9.1.10 |
| CVE-2020-2031 | 4.9 | Jul 8 | An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line… Affected: 9.1.0 before 9.1.3 |
| CVE-2020-1995 | 4.9 | May 13 | A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash Affected: 9.1.0 before 9.1.2 |
| CVE-2026-0266 | 4.8 | Jun 10 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Affected: 12.1.0 before 12.1.5; 11.2.0 before 11.2.11; 11.1.0 before 11.1.14; 10.2.0 |
| CVE-2026-0256 | 4.8 | May 13 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Affected: 12.1.0 before 12.1.7; 11.2.0 before 11.2.12; 11.1.0 before 11.1.15; 10.2.0 before 10.2.18-h6 |
| CVE-2024-5920 | 4.8 | Nov 14 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted… Affected: 10.1.0 before 10.1.14; 10.2.0 before 10.2.11; 11.0.0 before 11.0.6; 11.1.0 before 11.1.4 |
| CVE-2024-0007 | 4.8 | Feb 14 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the… Affected: 8.1.0 before 8.1.24; 9.0.0 before 9.0.17; 9.1.0 before 9.1.16; 10.0.0 before 10.0.11; 10.1.0 before 10.1.6; 8.1.24 |
| CVE-2023-6789 | 4.8 | Dec 13 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the… Affected: 8.1.0 before 8.1.26; 9.0.0 before 9.0.17; 9.1.0 before 9.1.17; 10.1.0 before 10.1.11; 10.2.0 before 10.2.5; 11.0.0 before 11.0.2 |
| CVE-2023-0007 | 4.8 | May 10 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript… Affected: 8.1.0 before 8.1.25; 9.0.0 before 9.0.17; 9.1.0 before 9.1.16; 10.0.0 before 10.0.7 |
| CVE-2020-1982 | 4.8 | Jul 8 | Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol Affected: 8.0.0 through 8.0.20; 8.1.0 before 8.1.14; 9.0.0 before 9.0.9; 9.1.0 before 9.1.3 |
| CVE-2024-9471 | 4.7 | Oct 9 | A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a… Affected: 9.0.0 before 10.0.0; 10.1.0 before 10.1.11; 10.2.0 before 10.2.8; 11.0.0 before 11.0.3 |
| CVE-2023-6795 | 4.7 | Dec 13 | An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary… Affected: 8.1.0 before 8.1.24; 9.0.0 before 9.0.17; 9.1.0 before 9.1.12; 10.0.0 before 10.0.9; 10.1.0 before 10.1.3 |
| CVE-2023-6794 | 4.7 | Dec 13 | An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system… Affected: 8.1.0 before 8.1.26; 9.0.0 before 9.0.17; 9.1.0 before 9.1.14 |
| CVE-2026-0318 | 4.6 | Oct 14 | PAN-OS: Denial of Service (DoS) on Panorama Affected: 12.2.0 before 12.2.4; 12.1.0 before 12.1.10-h2; 11.2.0 before 11.2.16; 11.1.0 before 11.1.16-h3 |
| CVE-2024-8688 | 4.4 | Sep 11 | An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables authenticated administrators (including… Affected: 9.1.0 before 9.1.15; 10.0.0 before 10.0.10; 10.1.0 |
| CVE-2024-5916 | 4.4 | Aug 14 | An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of… Affected: 10.2.0 before 10.2.8; 11.0.0 before 11.0.4 |
| CVE-2023-0008 | 4.4 | May 10 | A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from… Affected: 8.1.0 before 8.1.25; 9.0.0 before 9.0.17; 9.1.0 before 9.1.16; 10.0.0 before 10.0.12; 10.1.0 before 10.1.10; 10.2.0 before 10.2.4; +1 more |
| CVE-2022-0022 | 4.4 | Mar 9 | Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are not created with a sufficient… Affected: 8.1.0 before 8.1.21; 9.0.0 through 9.0.15; 9.1.0 before 9.1.11; 10.0.0 before 10.0.7 |
| CVE-2021-3036 | 4.4 | Apr 20 | An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web… Affected: 8.1.0 before 8.1.19; 9.0.0 before 9.0.12; 9.1.0 before 9.1.6; 10.0.0 before 10.0.1 |
| CVE-2021-3032 | 4.4 | Jan 13 | An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “http”, “email”, and “snmptrap” v3 log… Affected: 8.1.0 before 8.1.18; 9.0.0 before 9.0.12; 9.1.0 before 9.1.4; 10.0.0 before 10.0.1 |
| CVE-2020-1994 | 4.4 | May 13 | A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.13; 9.0.0 through 9.0.6 |
| CVE-2020-1978 | 4.4 | Apr 8 | TechSupport files generated on Palo Alto Networks VM Series firewalls for Microsoft Azure platform configured with high availability (HA) inadvertently collect Azure dashboard… Affected: 9.0.0 |
| CVE-2024-5918 | 4.3 | Nov 14 | An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an… Affected: 10.1.0 before 10.1.11; 10.2.0 through 10.2.4; 11.0.0 before 11.0.3; 10.2.4; 10.2.4; 10.2.4; +1 more |
| CVE-2021-3031 | 4.3 | Jan 13 | Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared… Affected: 8.1.0 before 8.1.18; 9.0.0 before 9.0.12; 9.1.0 before 9.1.5 |
| CVE-2018-10140 | 4.3 | Aug 16 | The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in… Affected: 8.1.2 and earlier |
| CVE-2017-7217 | 4.3 | Apr 14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters Affected: through 7.0.13; 7.1.0; 7.1.1; 7.1.2; 7.1.3; 7.1.4; +5 more |
| CVE-2026-0309 | 4.0 | Sep 10 | PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration Affected: 12.2.0 before 12.2.3; 12.1.0 before 12.1.4-h10; 11.2.0 before 11.2.4-h21; 11.1.0 before 11.1.4-h36; 10.2.0 before 10.2.7-h37 |