PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
288
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 116Medium 106Low 17
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0124 | 3.8 | Apr 11 | An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to the management web interface to… Affected: 10.1.0 before 10.1.14; 10.2.0 before 10.2.10; 11.0.0 before 11.0.6; 11.1.0 before 11.1.5; 11.2.0 before 11.2.1; 10.1.14; +10 more |
| CVE-2025-4227 | 3.5 | Jun 13 | An improper access control vulnerability in the Endpoint Traffic Policy Enforcement… Affected: 6.0.0 before 6.2.8; 6.0.0 before 6.2.8; 6.3.0 before 6.3.3; 6.3.0 before 6.3.3 |
| CVE-2025-0135 | 3.3 | May 14 | An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable… Affected: 6.0.0 before 6.2.8; 6.3.0 before 6.3.3 |
| CVE-2020-2048 | 3.3 | Nov 12 | An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be displayed in cleartext when… Affected: 8.1.0 before 8.1.17; 9.0.0 before 9.0.11; 9.1.0 before 9.1.2 |
| CVE-2020-2044 | 3.3 | Sep 9 | An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto… Affected: 8.0.0 through 8.0.20; 8.1.0 before 8.1.16; 9.0.0 before 9.0.10; 9.1.0 before 9.1.3 |
| CVE-2020-2043 | 3.3 | Sep 9 | An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the… Affected: 8.1.0 through 8.1.15; 9.0.0 before 9.0.10; 9.1.0 before 9.1.4 |
| CVE-2020-1987 | 3.3 | Apr 8 | An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the… Affected: 5.0 before 5.0.9; 5.1 before 5.1.1 |
| CVE-2021-3047 | 3.1 | Aug 11 | A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface Affected: 8.1.0 before 8.1.19; 9.0.0 before 9.0.14; 9.1.0 before 9.1.10; 10.0.0 before 10.0.4 |
| CVE-2020-2035 | 3.0 | Aug 12 | When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for… Affected: All versions, or not specified |
| CVE-2025-4614 | 2.7 | Oct 9 | An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall… Affected: 10.2.0 before 10.2.17; 11.1.0 before 11.1.6; 11.2.0 before 11.2.8; 11.1.6; 11.1.6; 11.1.6; +9 more |
| CVE-2024-2433 | 2.7 | Mar 13 | An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and… Affected: before 9.0.17; 9.1.0 before 9.1.17; 10.1.0 before 10.1.12; 10.2.0 before 10.2.8; 11.0.0 before 11.0.3; 9.0.17; +1 more |
| CVE-2023-6793 | 2.7 | Dec 13 | An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the… Affected: 9.1.0 before 9.1.17; 10.0.0 through 10.0.12; 10.1.0 before 10.1.11; 10.2.0 before 10.2.5; 11.0.0 before 11.0.2 |
| CVE-2019-1573 | 2.5 | Apr 9 | GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and… Affected: through 4.1.0; through 4.1.10 |
| CVE-2021-3037 | 2.3 | Apr 20 | An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in… Affected: 8.1.0 before 8.1.19; 9.0.0 before 9.0.13; 9.1.0 before 9.1.4 |
| CVE-2026-0317 | 1.2 | Oct 14 | PAN-OS: Denial of Service Vulnerability Affected: 12.2.0 before 12.2.4; 12.1.0 before 12.1.10-h2; 11.2.0 before 11.2.16; 11.1.0 before 11.1.16-h3 |
| CVE-2026-0316 | 1.1 | Oct 14 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability Affected: 12.2.0 before 12.2.4; 12.1.0 before 12.1.10-h2; 11.2.0 before 11.2.16; 11.1.0 before 11.1.16-h3 |
| CVE-2026-0308 | 1.1 | Sep 10 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Affected: 12.1.0 before 12.1.10; 11.2.0 before 11.2.13-h2; 11.1.0 before 11.1.16-h2 |
| CVE-2015-4162 | – | Jun 2 | XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to… Affected: through 5.0.15; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; +7 more |
| CVE-2014-3764 | – | Jan 6 | Cross-site scripting (XSS) vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5.0.15, 5.1.x before 5.1.10, and 6.0.x before 6.0.6… Affected: through 5.0.14; 5.1; 5.1.1; 5.1.2; 5.1.3; 5.1.4; +11 more |
| CVE-2013-5664 | – | Aug 31 | Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +23 more |
| CVE-2013-5663 | – | Aug 31 | The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via… Affected: through 4.0.8; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +17 more |
| CVE-2012-6606 | – | Aug 31 | Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal… Affected: through 1.1.6 |
| CVE-2012-6605 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via… Affected: through 3.1.10; 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +5 more |
| CVE-2012-6604 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via… Affected: through 3.1.10; 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +5 more |
| CVE-2012-6603 | – | Aug 31 | The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain… Affected: through 3.1.11; 3.1.9; 3.1.10; 4.0.0; 4.0.1; 4.0.2; +10 more |
| CVE-2012-6602 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via… Affected: through 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3 |
| CVE-2012-6601 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary… Affected: through 3.1.11; 3.1.9; 3.1.10; 4.0.0; 4.0.1; 4.0.2; +10 more |
| CVE-2012-6600 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more |
| CVE-2012-6599 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +3 more |
| CVE-2012-6598 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +2 more |
| CVE-2012-6597 | – | Aug 31 | Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service (management-server crash) by using the command-line… Affected: through 3.1.10; 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +5 more |
| CVE-2012-6596 | – | Aug 31 | Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +6 more |
| CVE-2012-6595 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more |
| CVE-2012-6594 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to… Affected: through 3.1.10; 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +5 more |
| CVE-2012-6593 | – | Aug 31 | Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088 Affected: through 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3 |
| CVE-2012-6592 | – | Aug 31 | Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091 Affected: through 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4 |
| CVE-2012-6591 | – | Aug 31 | The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary… Affected: through 3.1.9; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4 |
| CVE-2012-6590 | – | Aug 31 | The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139 Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +2 more |