Palo Alto Networks PAN-OS

• CVE-2024-0007 Medium 6.8 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface 0.4%
• CVE-2023-6793 Low 2.7 PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator 0.6%
• CVE-2023-6791 Medium 4.9 PAN-OS: Plaintext Disclosure of External System Integration Credentials 0.6%
• CVE-2023-6789 Medium 4.3 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface 0.4%
• CVE-2023-6795 Medium 5.5 PAN-OS: OS Command Injection Vulnerability in the Web Interface 1.1%
• CVE-2023-6794 Medium 5.5 PAN-OS: File Upload Vulnerability in the Web Interface 0.6%
• CVE-2023-6792 Medium 5.5 PAN-OS: OS Command Injection Vulnerability in the XML API 1.1%
• CVE-2023-6790 High 8.8 PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface 0.7%
• CVE-2023-38046 Medium 5.5 PAN-OS: Read System Files and Resources During Configuration Commit 0.5%
• CVE-2023-0010 Medium 5.4 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication 0.4%
• CVE-2023-0008 Medium 4.4 PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface 0.5%
• CVE-2023-0007 Medium 6.5 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface 0.4%
• CVE-2023-0005 Medium 4.1 PAN-OS: Exposure of Sensitive Information Vulnerability 0.3%
• CVE-2023-0004 Medium 6.5 PAN-OS: Local File Deletion Vulnerability 1.1%
• CVE-2022-0030 High 8.1 PAN-OS: Authentication Bypass in Web Interface 1.0%
• CVE-2022-0024 High 7.2 PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit 1.6%
• CVE-2022-0023 Medium 5.9 PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy 0.7%
• CVE-2022-0022 Medium 4.1 PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes 0.1%
• CVE-2022-0011 Medium 6.5 PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering 0.7%
• CVE-2021-3064 Critical 9.8 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces 20.1%
• CVE-2021-3063 High 7.5 PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces 0.9%
• CVE-2021-3062 High 8.1 PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users 0.7%
• CVE-2021-3061 Medium 6.4 PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) 0.9%
• CVE-2021-3060 High 8.1 PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) 32.5%
• CVE-2021-3059 High 8.1 PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates 1.5%
• CVE-2021-3058 High 8.8 PAN-OS: OS Command Injection Vulnerability in Web Interface XML API 1.6%
• CVE-2021-3056 High 8.8 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication 1.5%
• CVE-2021-3055 Medium 6.5 PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface 1.1%
• CVE-2021-3054 High 7.2 PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability 0.9%
• CVE-2021-3053 High 7.5 PAN-OS: Exceptional Condition Denial-of-Service (DoS) 1.0%
• CVE-2021-3052 High 8.0 PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface 0.6%
• CVE-2021-3050 High 8.8 PAN-OS: OS Command Injection Vulnerability in Web Interface 1.8%
• CVE-2021-3048 Medium 5.9 PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage 0.8%
• CVE-2021-3047 Medium 4.2 PAN-OS: Weak Cryptography Used in Web Interface Authentication 0.5%
• CVE-2021-3046 Medium 6.8 PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal 1.1%
• CVE-2021-3045 Medium 4.9 PAN-OS: OS Command Argument Injection in Web Interface 0.8%
• CVE-2021-3037 Low 2.3 PAN-OS: Secrets for scheduled configuration exports are logged in system logs 0.3%
• CVE-2021-3036 Medium 4.4 PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly 0.2%
• CVE-2021-3032 Medium 4.4 PAN-OS: Configuration secrets for log forwarding may be logged in system logs 0.2%
• CVE-2021-3031 Medium 4.3 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) 0.5%
• CVE-2020-2050 High 8.2 PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification 1.0%
• CVE-2020-2048 Low 3.3 PAN-OS: System proxy passwords may be logged in clear text while viewing system state 0.3%
• CVE-2020-2022 High 7.5 PAN-OS: Panorama session disclosure during context switch into managed device 1.2%
• CVE-2020-2000 High 7.2 PAN-OS: OS command injection and memory corruption vulnerability 3.4%
• CVE-2020-1999 Medium 5.3 PAN-OS: Threat signatures are evaded by specifically crafted packets 1.3%
• CVE-2020-2044 Low 3.3 PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history 0.7%
• CVE-2020-2043 Low 3.3 PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs 0.7%
• CVE-2020-2042 High 7.2 PAN-OS: Buffer overflow in the management web interface 2.3%
• CVE-2020-2041 High 7.5 PAN-OS: Management web interface denial-of-service (DoS) 2.1%
• CVE-2020-2040 Critical 9.8 PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled 3.9%