| CVE-2025-0126 |
When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to…
|
8.3
High
|
Apr 11, 2025 |
| CVE-2025-0125 |
An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS®…
|
6.9
Medium
|
Apr 11, 2025 |
| CVE-2025-0124 |
An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated…
|
5.1
Medium
|
Apr 11, 2025 |
| CVE-2025-0116 |
A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot…
|
6.8
Medium
|
Mar 12, 2025 |
| CVE-2025-0115 |
A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read…
|
6.8
Medium
|
Mar 12, 2025 |
| CVE-2025-0114 |
A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an…
|
8.2
High
|
Mar 12, 2025 |
| CVE-2025-0111 |
Exploited
Palo Alto Networks PAN-OS File Read Vulnerability
|
7.1
High
|
Feb 12, 2025 |
| CVE-2025-0109 |
An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an…
|
6.9
Medium
|
Feb 12, 2025 |
| CVE-2025-0108 |
Exploited
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
|
8.8
High
|
Feb 12, 2025 |
| CVE-2025-0107 |
Expedition: OS Command Injection Vulnerability
|
7.7
High
|
Jan 11, 2025 |
| CVE-2025-0106 |
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate…
|
6.9
Medium
|
Jan 11, 2025 |
| CVE-2025-0105 |
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to…
|
6.9
Medium
|
Jan 11, 2025 |
| CVE-2025-0104 |
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute…
|
7.0
High
|
Jan 11, 2025 |
| CVE-2025-0103 |
An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition…
|
9.2
Critical
|
Jan 11, 2025 |
| CVE-2024-9474 |
Exploited
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
|
6.9
Medium
|
Nov 18, 2024 |
| CVE-2024-0012 |
Exploited
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
|
9.3
Critical
|
Nov 18, 2024 |
| CVE-2024-2550 |
A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an…
|
8.7
High
|
Nov 14, 2024 |
| CVE-2024-5920 |
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write…
|
4.6
Medium
|
Nov 14, 2024 |
| CVE-2024-2552 |
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass…
|
6.8
Medium
|
Nov 14, 2024 |
| CVE-2024-5918 |
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a…
|
5.3
Medium
|
Nov 14, 2024 |
| CVE-2024-5919 |
A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an…
|
5.1
Medium
|
Nov 14, 2024 |
| CVE-2024-2551 |
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to…
|
8.7
High
|
Nov 14, 2024 |
| CVE-2024-9472 |
A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and…
|
8.7
High
|
Nov 14, 2024 |
| CVE-2024-9471 |
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an…
|
5.1
Medium
|
Oct 9, 2024 |
| CVE-2024-9468 |
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash…
|
8.2
High
|
Oct 9, 2024 |