Palo Alto Networks Prisma Access

• CVE-2023-6795 Medium 5.5 PAN-OS: OS Command Injection Vulnerability in the Web Interface 1.1%
• CVE-2023-6794 Medium 5.5 PAN-OS: File Upload Vulnerability in the Web Interface 0.6%
• CVE-2023-6792 Medium 5.5 PAN-OS: OS Command Injection Vulnerability in the XML API 1.1%
• CVE-2023-6790 High 8.8 PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface 0.7%
• CVE-2023-38046 Medium 5.5 PAN-OS: Read System Files and Resources During Configuration Commit 0.5%
• CVE-2023-0010 Medium 5.4 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication 0.4%
• CVE-2023-0008 Medium 4.4 PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface 0.5%
• CVE-2023-0007 Medium 6.5 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface 0.4%
• CVE-2023-0005 Medium 4.1 PAN-OS: Exposure of Sensitive Information Vulnerability 0.3%
• CVE-2023-0004 Medium 6.5 PAN-OS: Local File Deletion Vulnerability 1.1%
• CVE-2022-0030 High 8.1 PAN-OS: Authentication Bypass in Web Interface 1.0%
• CVE-2022-0023 Medium 5.9 PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy 0.7%
• CVE-2022-0022 Medium 4.1 PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes 0.1%
• CVE-2022-0011 Medium 6.5 PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering 0.7%
• CVE-2021-3064 Critical 9.8 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces 20.1%
• CVE-2021-3063 High 7.5 PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces 0.9%
• CVE-2021-3062 High 8.1 PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users 0.7%
• CVE-2021-3061 Medium 6.4 PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) 0.9%
• CVE-2021-3060 High 8.1 PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) 32.5%
• CVE-2021-3059 High 8.1 PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates 1.5%
• CVE-2021-3058 High 8.8 PAN-OS: OS Command Injection Vulnerability in Web Interface XML API 1.6%
• CVE-2021-3056 High 8.8 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication 1.5%