Palo Alto Networks Cloud NGFW

• CVE-2025-4231 High 8.6 PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface 1.0%
• CVE-2025-0136 Medium 5.3 PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices 0.2%
• CVE-2025-0137 Medium 4.8 PAN-OS: Improper Neutralization of Input in the Management Web Interface 0.4%
• CVE-2025-0133 Low 1.2 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal 46.3%
• CVE-2025-0130 High 8.2 PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets 0.4%
• CVE-2025-0123 Medium 5.9 PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet Captures 0.1%
• CVE-2025-0128 High 8.7 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet 0.3%
• CVE-2025-0127 High 7.1 PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series 0.6%
• CVE-2025-0126 High 8.3 PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login 0.4%
• CVE-2025-0125 Medium 6.9 PAN-OS: Improper Neutralization of Input in the Management Web Interface 0.4%
• CVE-2025-0124 Medium 5.1 PAN-OS: Authenticated File Deletion Vulnerability on the Management Web Interface 0.4%
• CVE-2025-0116 Medium 6.8 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame 0.2%
• CVE-2025-0115 Medium 6.8 PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI 0.2%
• CVE-2025-0114 High 8.2 PAN-OS: Denial of Service (DoS) in GlobalProtect 0.4%
• CVE-2025-0109 Medium 6.9 PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface 0.6%
• CVE-2025-0107 High 7.7 Expedition: OS Command Injection Vulnerability 78.4%
• CVE-2025-0106 Medium 6.9 Expedition: Wildcard Expansion Vulnerability 0.5%
• CVE-2025-0105 Medium 6.9 Expedition: Arbitrary File Deletion Vulnerability 13.2%
• CVE-2025-0104 High 7.0 Expedition: Cross-Site Scripting (XSS) Vulnerability 0.4%
• CVE-2025-0103 Critical 9.2 Expedition: SQL Injection Vulnerability 0.6%
• CVE-2024-2550 High 8.7 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet 0.5%
• CVE-2024-5920 Medium 4.6 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator 0.3%
• CVE-2024-5917 Low 2.1 PAN-OS: Server-Side Request Forgery in WildFire 0.5%
• CVE-2024-2552 Medium 6.8 PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI) 0.5%
• CVE-2024-5918 Medium 5.3 PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User 0.2%
• CVE-2024-5919 Medium 5.1 PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability 0.3%
• CVE-2024-2551 High 8.7 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet 0.5%
• CVE-2024-9472 High 8.7 PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic 0.4%
• CVE-2024-9471 Medium 5.1 PAN-OS: Privilege Escalation (PE) Vulnerability in XML API 0.3%
• CVE-2024-9468 High 8.2 PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet 0.4%
• CVE-2024-8691 Medium 5.3 PAN-OS: User Impersonation in GlobalProtect Portal 0.3%
• CVE-2024-8688 Medium 6.7 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) 0.2%
• CVE-2024-8687 Medium 6.9 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes 0.4%
• CVE-2024-8686 High 8.6 PAN-OS: Command Injection Vulnerability 1.4%
• CVE-2024-5916 Medium 6.0 PAN-OS: Cleartext Exposure of External System Secrets 0.2%
• CVE-2024-5913 Medium 6.1 PAN-OS: Improper Input Validation Vulnerability in PAN-OS 0.2%
• CVE-2024-5911 High 7.0 PAN-OS: File Upload Vulnerability in the Panorama Web Interface 0.6%
• CVE-2024-3388 Medium 4.1 PAN-OS: User Impersonation in GlobalProtect SSL VPN 0.3%
• CVE-2024-3387 Medium 5.3 PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure 0.2%
• CVE-2024-3386 Medium 5.3 PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended 0.4%
• CVE-2024-3385 High 7.5 PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled 0.9%
• CVE-2024-3384 High 7.5 PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets 0.9%
• CVE-2024-3383 High 7.4 PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE) 0.6%
• CVE-2024-3382 High 7.5 PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets 0.9%
• CVE-2024-2433 Medium 4.3 PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss 0.6%
• CVE-2024-0011 Medium 4.3 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication 0.4%
• CVE-2024-0010 Medium 4.3 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal 0.5%
• CVE-2024-0009 Medium 6.3 PAN-OS: Improper IP Address Verification in GlobalProtect Gateway 0.2%
• CVE-2024-0008 Medium 6.6 PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface 0.5%
• CVE-2024-0007 Medium 6.8 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface 0.4%