Palo Alto Networks PAN-OS

CVE-2020-2039 Medium 5.3 PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload 46.4%
CVE-2020-2038 High 7.2 PAN-OS: OS command injection vulnerability in the management web interface 86.2%
CVE-2020-2037 High 7.2 PAN-OS: OS command injection vulnerability in the management web interface 3.6%
CVE-2020-2036 High 8.8 PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface 23.9%
CVE-2020-2035 Low 3.0 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions 0.8%
CVE-2020-2034 High 8.1 PAN-OS: OS command injection vulnerability in GlobalProtect portal 7.2%
CVE-2020-2031 Medium 4.9 PAN-OS: Integer underflow in the management interface 1.1%
CVE-2020-2030 High 7.2 PAN-OS: OS command injection vulnerability in the management interface 2.5%
CVE-2020-1982 Medium 4.8 PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services 0.4%
CVE-2020-2029 High 7.2 PAN-OS: OS command injection vulnerability in management interface certificate generator 1.8%
CVE-2020-2028 High 7.2 PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification 1.8%
CVE-2020-2027 High 7.2 PAN-OS: Buffer overflow in authd authentication response 2.1%
CVE-2020-2018 Critical 9.0 PAN-OS: Panorama authentication bypass vulnerability 1.4%
CVE-2020-2017 High 8.8 PAN-OS: DOM-Based cross site scripting vulnerability in management web interface 0.8%
CVE-2020-2016 High 7.0 PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation 0.6%
CVE-2020-2015 High 8.8 PAN-OS: Buffer overflow in the management server 1.9%
CVE-2020-2014 High 8.8 PAN-OS: OS injection vulnerability in PAN-OS management server 2.7%
CVE-2020-2013 High 8.3 PAN-OS: Panorama context switch session cookie disclosure 0.7%
CVE-2020-2012 High 7.5 PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak 2.0%
CVE-2020-2011 High 7.5 PAN-OS: Panorama registration denial of service 1.9%
CVE-2020-2010 High 7.2 PAN-OS: Authenticated user command injection vulnerability 2.2%
CVE-2020-2009 High 7.2 PAN-OS: Panorama SD WAN arbitrary file creation 2.0%
CVE-2020-2008 High 7.2 PAN-OS: OS command injection or arbitrary file deletion vulnerability 2.8%
CVE-2020-2007 High 7.2 PAN-OS: OS command injection in management server 2.2%
CVE-2020-2006 High 7.2 PAN-OS: Buffer overflow in management server payload parser 1.9%
CVE-2020-2005 High 7.1 PAN-OS: GlobalProtect Clientless VPN session hijacking 0.9%
CVE-2020-2003 Medium 6.5 PAN-OS: Authenticated administrator can delete arbitrary system file 0.9%
CVE-2020-2002 High 8.1 PAN-OS: Spoofed Kerberos key distribution center authentication bypass 1.3%
CVE-2020-2001 High 8.1 PAN-OS: Panorama External control of file vulnerability leads to privilege escalation 1.4%
CVE-2020-1998 Medium 5.4 PAN-OS: Improper SAML SSO authorization of shared local users 0.9%
CVE-2020-1997 Medium 5.3 PAN-OS: GlobalProtect registration open redirect 0.9%
CVE-2020-1996 Medium 5.3 PAN-OS: Panorama management server log injection 0.9%
CVE-2020-1995 Medium 4.9 PAN-OS: Management server rasmgr denial of service 1.1%
CVE-2020-1994 Medium 4.1 PAN-OS: Predictable temporary file vulnerability 0.2%
CVE-2020-1993 Low 3.7 PAN-OS: GlobalProtect Portal PHP session fixation vulnerability 0.4%
CVE-2020-1992 High 8.1 PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation 3.5%
CVE-2020-1990 High 7.2 PAN-OS: Buffer overflow in the management server 2.1%
CVE-2020-1979 High 8.1 PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation 1.0%
CVE-2020-1980 High 7.8 PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands 0.6%
CVE-2020-1981 High 7.0 PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation 0.4%
CVE-2020-1975 Medium 6.8 Missing XML Validation in PAN-OS Web Interface 1.0%