Aller au contenu

Vulnérabilités connues pour Palo Alto Networks PAN-OS

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2021-3056 A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated… 8.8 Élevée 10 nov. 2021
CVE-2021-3055 An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web… 6.5 Moyenne 8 sept. 2021
CVE-2021-3054 A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo Alto Networks PAN-OS web interface… 7.2 Élevée 8 sept. 2021
CVE-2021-3053 An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that… 7.5 Élevée 8 sept. 2021
CVE-2021-3052 A reflected cross-site scripting (XSS) vulnerability in the Palo Alto Network PAN-OS web interface enables an… 8.0 Élevée 8 sept. 2021
CVE-2021-3050 An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated… 8.8 Élevée 11 août 2021
CVE-2021-3048 Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop… 5.9 Moyenne 11 août 2021
CVE-2021-3047 A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks… 4.2 Moyenne 11 août 2021
CVE-2021-3046 An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML… 6.8 Moyenne 11 août 2021
CVE-2021-3045 An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated… 4.9 Moyenne 11 août 2021
CVE-2021-3037 An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection… 2.3 Faible 20 avr. 2021
CVE-2021-3036 An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in… 4.4 Moyenne 20 avr. 2021
CVE-2021-3032 An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where… 4.4 Moyenne 13 janv. 2021
CVE-2021-3031 Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series,… 4.3 Moyenne 13 janv. 2021
CVE-2020-2048 An information exposure through log file vulnerability exists where the password for the configured system proxy… 3.3 Faible 12 nov. 2020
CVE-2020-2050 An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS… 8.2 Élevée 12 nov. 2020
CVE-2020-2022 An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the… 7.5 Élevée 12 nov. 2020
CVE-2020-2000 An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows… 7.2 Élevée 12 nov. 2020
CVE-2020-1999 A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker… 5.3 Moyenne 12 nov. 2020
CVE-2020-2044 An information exposure through log file vulnerability where an administrator's password or other sensitive… 3.3 Faible 9 sept. 2020
CVE-2020-2043 An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log… 3.3 Faible 9 sept. 2020
CVE-2020-2042 A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt… 7.2 Élevée 9 sept. 2020
CVE-2020-2041 An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user… 7.5 Élevée 9 sept. 2020
CVE-2020-2039 An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user… 5.3 Moyenne 9 sept. 2020
CVE-2020-2040 A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially… 9.8 Critique 9 sept. 2020

Autres produits Palo Alto Networks