Aller au contenu

Vulnérabilités de Palo Alto Networks PAN-OS

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2020-2038 An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to… 7.2 Élevée 9 sept. 2020
CVE-2020-2037 An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to… 7.2 Élevée 9 sept. 2020
CVE-2020-2036 A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface 8.8 Élevée 9 sept. 2020
CVE-2020-2035 When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering… 3.0 Faible 12 août 2020
CVE-2020-2034 An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based… 8.1 Élevée 8 juil. 2020
CVE-2020-2031 An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated… 4.9 Moyenne 8 juil. 2020
CVE-2020-2030 An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to… 7.2 Élevée 8 juil. 2020
CVE-2020-1982 Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a… 4.8 Moyenne 8 juil. 2020
CVE-2020-2021 Exploitée Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 10.0 Critique 29 juin 2020
CVE-2020-2029 An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to… 7.2 Élevée 10 juin 2020
CVE-2020-2028 An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute… 7.2 Élevée 10 juin 2020
CVE-2020-2027 A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated… 7.2 Élevée 10 juin 2020
CVE-2020-2018 An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network… 9.0 Critique 13 mai 2020
CVE-2020-2017 A DOM-Based Cross Site Scripting Vulnerability exists in PAN-OS and Panorama Management Web Interfaces 8.8 Élevée 13 mai 2020
CVE-2020-2008 An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated… 7.2 Élevée 13 mai 2020
CVE-2020-2007 An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to… 7.2 Élevée 13 mai 2020
CVE-2020-2016 A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root… 7.0 Élevée 13 mai 2020
CVE-2020-2006 A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an authenticated… 7.2 Élevée 13 mai 2020
CVE-2020-2015 A buffer overflow vulnerability in the PAN-OS management server allows authenticated users to crash system processes… 8.8 Élevée 13 mai 2020
CVE-2020-2005 A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks… 7.1 Élevée 13 mai 2020
CVE-2020-2014 An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute… 8.8 Élevée 13 mai 2020
CVE-2020-2013 A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses… 8.3 Élevée 13 mai 2020
CVE-2020-2003 An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated… 6.5 Moyenne 13 mai 2020
CVE-2020-2012 Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management… 7.5 Élevée 13 mai 2020
CVE-2020-2002 An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo… 8.1 Élevée 13 mai 2020

Autres produits Palo Alto Networks