Known vulnerabilities in Palo Alto PAN-OS 8.0.11-h1

Version: 8.0.11-h1
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 40
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 8.0.11-h1 Palo Alto PAN-OS 8.0.11-h1 is affected by 40 vulnerabilities: 2 critical, 4 high, 14 medium, 20 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-0008
CWE-362 Low
No
No
8.1.25, 9.0.17, 9.1.16, 10.0.12, 10.1.10, 10.2.4, 11.0.1 10.05.2023 SB2023051066
SB2024041515
#VU76003 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0007
CWE-79 Low
No
No
8.1.25, 9.0.17, 9.1.16, 10.0.7 10.05.2023 SB2023051065
#VU62311 - Improper Handling of Exceptional Conditions
CVE-2022-0023
CWE-755 Medium
No
No
8.1.22, 9.0.16, 10.0.10, 10.1.5 13.04.2022 SB2022041337
#VU48409 - Improper Check for Unusual or Exceptional Conditions
CVE-2020-1999
CWE-754 Medium
No
No
8.1.17, 9.0.11, 9.1.5 12.11.2020 SB2020111219
#VU46630 - Information Exposure Through Log Files
CVE-2020-2044
CWE-532 Low
No
No
8.1.16, 9.0.10, 9.1.3 11.09.2020 SB2020091026
#VU46627 - Configuration
CVE-2020-2041
CWE-16 Medium
No
No
8.1.16 11.09.2020 SB2020091024
#VU29608 - Cryptographic Issues
CVE-2020-1982
CWE-310 Low
No
No
8.1.15, 9.0.9, 9.1.3 09.07.2020 SB2020070908
#VU29607 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2030
CWE-78 Low
No
No
8.1.15 09.07.2020 SB2020070907
#VU29605 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2034
CWE-78 Critical
Public exploit available
No
8.1.15, 9.0.9, 9.1.3 09.07.2020 SB2020070905
#VU29387 - Improper Authentication
CVE-2020-2021
CWE-287 High
Public exploit available
Exploited
8.1.15, 9.0.9, 9.1.3 30.06.2020 SB2020063004
#VU28958 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2029
CWE-78 Low
No
No
7.1.26, 8.1.13 11.06.2020 SB2020061101
#VU28957 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2028
CWE-78 Low
No
No
8.1.13, 9.0.7 10.06.2020 SB2020061101
#VU28956 - Stack-based buffer overflow
CVE-2020-2027
CWE-121 Low
No
No
8.1.13, 9.0.7 10.06.2020 SB2020061101
#VU27950 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-2016
CWE-362 Low
No
No
7.1.26, 8.1.13, 9.0.6, 9.1.0, 9.2.0 15.05.2020 SB2020051518
#VU27949 - Improper input validation
CVE-2020-2011
CWE-20 Medium
No
No
8.1.14, 9.0.7, 9.1.0 15.05.2020 SB2020051518
#VU27899 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1997
CWE-601 Low
No
No
7.1.26, 8.0.14 14.05.2020 SB2020051401
#VU27893 - Memory corruption
CVE-2020-2006
CWE-119 Low
No
No
8.1.14 14.05.2020 SB2020051401
#VU27892 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2007
CWE-78 Low
No
No
8.1.14, 9.0.7 14.05.2020 SB2020051401
#VU27891 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2008
CWE-78 Low
No
No
8.1.14 14.05.2020 SB2020051401
#VU27890 - Unrestricted Upload of File with Dangerous Type
CVE-2020-2009
CWE-434 Medium
No
No
8.1.14, 9.0.7 14.05.2020 SB2020051401


Showing elements 1 - 20 out of 40