PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
306
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 121Medium 117Low 19
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9471 | 4.7 | Oct 9 | PAN-OS: Privilege Escalation (PE) Vulnerability in XML API Affected: 11.0.0 before 11.0.3; 10.1.0 before 10.1.11; 10.2.0 before 10.2.8; 9.1; 9.0 |
| CVE-2023-6795 | 4.7 | Dec 13 | PAN-OS: OS Command Injection Vulnerability in the Web Interface Affected: 8.1 before 8.1.24-h1; 9.0 before 9.0.17; 9.1 before 9.1.12; 10.0 before 10.0.9; 10.1 before 10.1.3 |
| CVE-2023-6794 | 4.7 | Dec 13 | PAN-OS: File Upload Vulnerability in the Web Interface Affected: 8.1 before 8.1.26; 9.0 before 9.0.17-h1; 9.1 before 9.1.14 |
| CVE-2026-0318 | 4.6 | Oct 14 | PAN-OS: Denial of Service (DoS) on Panorama Affected: 12.2.0 before 12.2.4; 12.1.0 before 12.1.10-h2; 11.2.0 before 11.2.16; 11.1.0 before 11.1.16-h3 |
| CVE-2024-8688 | 4.4 | Sep 11 | PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) Affected: 9.1.0 before 9.1.15; 10.0.0 before 10.0.10; 10.1.0 before 10.1.1 |
| CVE-2024-5916 | 4.4 | Aug 14 | PAN-OS: Cleartext Exposure of External System Secrets Affected: 10.2 before 10.2.8; 11.0 before 11.0.4 |
| CVE-2023-0008 | 4.4 | May 10 | PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface Affected: 8.1 before 8.1.25; 9.0 before 9.0.17; 9.1 before 9.1.16; 10.0 before 10.0.12; 10.1 before 10.1.10; 10.2 before 10.2.4; +1 more |
| CVE-2022-0022 | 4.4 | Mar 9 | PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes Affected: 9.0.*; 9.1 before 9.1.11; 8.1 before 8.1.21; 10.0 before 10.0.7 |
| CVE-2021-3036 | 4.4 | Apr 20 | PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly Affected: 8.1 before 8.1.19; 9.0 before 9.0.12; 9.1 before 9.1.6; 10.0 before 10.0.1 |
| CVE-2021-3032 | 4.4 | Jan 13 | PAN-OS: Configuration secrets for log forwarding may be logged in system logs Affected: 8.1 before 8.1.18; 9.0 before 9.0.12; 9.1 before 9.1.4; 10.0 before 10.0.1 |
| CVE-2020-1994 | 4.4 | May 13 | PAN-OS: Predictable temporary file vulnerability Affected: 7.1.*; 8.0.*; 8.1 before 8.1.13; 9.0 before 9.0.7 |
| CVE-2020-1978 | 4.4 | Apr 8 | VM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMs Affected: 9.0.0 |
| CVE-2024-5918 | 4.3 | Nov 14 | PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User Affected: 11.0.0 before 11.0.3; 10.2.0 before 10.2.4-h5; 10.1.0 before 10.1.11 |
| CVE-2021-3031 | 4.3 | Jan 13 | PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) Affected: 8.1 before 8.1.18; 9.0 before 9.0.12; 9.1 before 9.1.5 |
| CVE-2018-10140 | 4.3 | Aug 16 | The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in… Affected: 8.1.2 and earlier |
| CVE-2017-7217 | 4.3 | Apr 14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters Affected: through 7.0.13; 7.1.0; 7.1.1; 7.1.2; 7.1.3; 7.1.4; +5 more |
| CVE-2026-0309 | 4.0 | Sep 10 | PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration Affected: 12.2.0 before 12.2.3; 12.1.0 before 12.1.4-h10; 11.2.0 before 11.2.4-h21; 11.1.0 before 11.1.4-h36; 10.2.0 before 10.2.7-h37 |