Known vulnerabilities in Palo Alto PAN-OS 8.1.11

Version: 8.1.11
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 8.1.11 Palo Alto PAN-OS 8.1.11 is affected by 88 vulnerabilities: 3 critical, 9 high, 29 medium, 47 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97293 - Exposure of sensitive information to an unauthorized actor
CVE-2024-8687
CWE-200 Low
No
No
8.1.25, 9.0.17, 9.1.16, 10.0.12, 10.1.9, 10.2.4, 11.0.1 16.09.2024 SB2024091612
#VU88504 - Improper input validation
CVE-2024-3384
CWE-20 Medium
No
No
8.1.24, 9.0.17, 9.1.15-h1, 10.0.12 12.04.2024 SB2024041222
#VU88493 - Improper Privilege Management
CVE-2024-3388
CWE-269 Low
No
No
8.1.26, 9.0.17-h4, 9.1.17, 10.1.11-h4, 10.2.7-h3, 11.0.3 12.04.2024 SB2024041210
#VU86540 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-0007
CWE-79 Low
No
No
8.1.24-h1, 8.1.25, 9.0.17, 9.1.16, 10.0.11, 10.1.6 15.02.2024 SB2024021525
#VU86535 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-0011
CWE-79 Low
No
No
8.1.24, 9.0.17, 9.1.13, 10.0.11, 10.1.3 15.02.2024 SB2024021522
#VU84405 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-6795
CWE-78 Low
No
No
8.1.24-h1, 9.0.17, 9.1.12, 10.0.9, 10.1.3 13.12.2023 SB2023121399
#VU77363 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0010
CWE-79 Low
No
No
8.1.24, 9.0.17, 9.1.16, 10.0.11, 10.1.6, 10.2.2 15.06.2023 SB2023061518
#VU76004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-0008
CWE-362 Low
No
No
8.1.25, 9.0.17, 9.1.16, 10.0.12, 10.1.10, 10.2.4, 11.0.1 10.05.2023 SB2023051066
SB2024041515
#VU76003 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0007
CWE-79 Low
No
No
8.1.25, 9.0.17, 9.1.16, 10.0.7 10.05.2023 SB2023051065
#VU75046 - Cleartext Storage of Sensitive Information
CVE-2023-0005
CWE-312 Low
No
No
8.1.24, 9.0.17, 9.1.15, 10.0.12, 10.1.8, 10.2.3 12.04.2023 SB2023041262
SB2024041515
#VU75045 - Improper Check or Handling of Exceptional Conditions
CVE-2023-0004
CWE-703 Low
No
No
8.1.24, 9.0.17, 9.1.15, 10.0.11, 10.1.6 12.04.2023 SB2023041261
#VU68269 - Improper Authentication
CVE-2022-0030
CWE-287 High
No
No
8.1.24 12.10.2022 SB2022101256
#VU66399 - Insufficient Control of Network Message Volume (Network Amplification)
CVE-2022-0028
CWE-406 Medium
No
Exploited
8.1.23-h1, 9.0.16-h3, 9.1.14-h4, 10.1.6-h6, 10.2.2-h2 11.08.2022 SB2022081123
SB2024041515
#VU63073 - Improper input validation
CVE-2022-0024
CWE-20 Low
No
No
8.1.23, 9.0.16, 9.1.13, 10.0.10, 10.1.5 11.05.2022 SB2022051126
#VU62311 - Improper Handling of Exceptional Conditions
CVE-2022-0023
CWE-755 Medium
No
No
8.1.22, 9.0.16, 10.0.10, 10.1.5 13.04.2022 SB2022041337
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
8.1.23, 9.0.16-hf, 9.1.13-hf, 10.0.10, 10.1.5-hf, 10.2.1 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61214 - Use of Password Hash With Insufficient Computational Effort
CVE-2022-0022
CWE-916 Low
No
No
8.1.21, 9.1.11, 10.0.7 09.03.2022 SB2022030913
#VU60481 - Incorrect Regular Expression
CVE-2022-0011
CWE-185 Medium
No
No
8.1.21, 9.1.12, 10.0.8, 10.1.3 09.02.2022 SB2022020926
#VU58112 - Improper Access Control
CVE-2021-3062
CWE-284 High
No
No
8.1.20, 9.0.14, 9.1.11, 10.0.8 11.11.2021 SB2021111113
#VU58111 - Memory corruption
CVE-2021-3056
CWE-119 Critical
No
No
8.1.20, 9.0.14, 9.1.9, 10.0.1 11.11.2021 SB2021111112


Showing elements 1 - 20 out of 88