Skip to content

Known vulnerabilities in Palo Alto Networks PAN-OS

Is your version affected?

CVE Summary Score Published
CVE-2020-2011 An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows… 7.5 High May 13, 2020
CVE-2020-2001 An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic… 8.1 High May 13, 2020
CVE-2020-2010 An OS command injection vulnerability in PAN-OS management interface allows an authenticated administrator to execute… 7.2 High May 13, 2020
CVE-2020-2009 An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an… 7.2 High May 13, 2020
CVE-2020-1998 An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of… 5.4 Medium May 13, 2020
CVE-2020-1997 An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to… 5.3 Medium May 13, 2020
CVE-2020-1996 A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote… 5.3 Medium May 13, 2020
CVE-2020-1995 A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a… 4.9 Medium May 13, 2020
CVE-2020-1994 A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt… 4.1 Medium May 13, 2020
CVE-2020-1993 The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which… 3.7 Low May 13, 2020
CVE-2020-1990 A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to… 7.2 High Apr 8, 2020
CVE-2020-1992 A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC)… 8.1 High Apr 8, 2020
CVE-2020-1979 A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge… 8.1 High Mar 11, 2020
CVE-2020-1980 A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted… 7.8 High Mar 11, 2020
CVE-2020-1981 A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation 7.0 High Mar 11, 2020
CVE-2020-1975 Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows… 6.8 Medium Feb 12, 2020
CVE-2019-17440 Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation… 10.0 Critical Dec 20, 2019
CVE-2019-17437 An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser… 7.8 High Dec 5, 2019
CVE-2019-1581 A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated… 9.8 Critical Aug 23, 2019
CVE-2019-1572 PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files Not rated Mar 26, 2019
CVE-2018-10140 The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to… Not rated Aug 16, 2018
CVE-2018-10139 The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and… Not rated Aug 16, 2018

Other Palo Alto Networks products