[ Vendor · 6 CVEs ]
paloaltonetworks
CVEs affecting paloaltonetworks published in the last 30 days, plus any paloaltonetworks CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2024-9474 | 18 Nov 2024 | CVSS 7.2 | Palo Alto Networks PAN-OS Management Interface OS Command InjectionA privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface… | Exploited |
| CVE-2024-5910 | 10 Jul 2024 | CVSS 9.8 | Palo Alto Networks Expedition Missing AuthenticationMissing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with… | Exploited |
| CVE-2024-3400 | 12 Apr 2024 | CVSS 10.0 | Palo Alto Networks PAN-OS Command InjectionA command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for… | Exploited |
| CVE-2022-0028 | 10 Aug 2022 | CVSS 8.6 | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-ServiceA PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS)… | Exploited |
| CVE-2017-15944 | 11 Dec 2017 | CVSS 9.8 | Palo Alto Networks PAN-OS Remote Code ExecutionPalo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute… | Exploited |
| CVE-2016-5195 | 10 Nov 2016 | CVSS 7.0 | Linux Kernel Race ConditionRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of… | ExploitedFix |