주요 제품 취약점 (15건)
"Palo Alto PAN-OS" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for speci…
|
CVE-2024-3400 | 10.0 | CWE-20 | KEV | 2024-04-12 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (uncheck…
|
CVE-2020-2021 | 10.0 | CWE-347 | KEV | 2022-03-25 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an un…
|
CVE-2026-0300 | 9.8 | CWE-787 | KEV | 2026-05-06 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interfac…
|
CVE-2024-0012 | 9.8 | CWE-306 | KEV | 2024-11-18 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrar…
|
CVE-2017-15944 | 9.8 | CWE-20 | KEV | 2022-08-18 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass se…
|
CVE-2026-0257 | 9.1 | CWE-565 | KEV | 2026-05-29 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web inte…
|
CVE-2025-0108 | 9.1 | CWE-306 | KEV | 2025-02-18 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) a…
|
CVE-2022-0028 | 8.6 | CWE-406 | KEV | 2022-08-22 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalPro…
|
CVE-2019-1579 | 8.1 | CWE-134 | KEV | 2022-01-10 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a mali…
|
CVE-2024-3393 | 7.5 | CWE-754 | KEV | 2024-12-30 |
|
Palo Alto PAN-OS
Palo Alto Networks Expedition
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Exp…
|
CVE-2024-9463 | 7.5 | CWE-78 | KEV | 2024-11-14 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface …
|
CVE-2024-9474 | 7.2 | CWE-78 | KEV | 2024-11-18 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the manag…
|
CVE-2025-0111 | 6.5 | CWE-73 | KEV | 2025-02-20 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with…
|
CVE-2026-0322 | — | CWE-94 | KEV | 2026-10-14 |
|
Palo Alto PAN-OS
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with n…
|
CVE-2026-0310 | — | CWE-787 | — |