Known vulnerabilities in Palo Alto PAN-OS 9.0.5
Vendor:
Palo Alto Networks, Inc.
Software:
Palo Alto PAN-OS
Version:
9.0.5
Software CPE:
cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Website:
https://www.paloaltonetworks.com/
Total vulnerabilities:
90
Public exploits:
6
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
11.1.17
11.1.16-h1
11.2.10-h11
10.2.18-h8
10.2.16-h9
10.2.13-h23
10.2.10-h39
10.2.7-h36
11.1.13-h9
11.1.10-h30
11.1.7-h8
11.1.6-h35
11.1.4-h35
11.2.10-h12
11.2.7-h18
11.2.4-h20
12.1.4-h8
12.1.7-h2
12.1.7-h1
11.1.16
11.2.13
12.1.8
12.2
10.2.18-h7
11.1.7-h7
12.1.6
10.2.7-h35
10.2.10-h37
10.2.13-h22
10.2.16-h8
11.1.4-h34
11.1.6-h33
11.1.10-h27
11.1.13-h7
11.2.4-h18
11.2.7-h16
11.2.10-h9
11.1.10-h26
11.1.13-h6
11.2.7-h14
11.2.7-h15
11.2.10-h7
11.2.10-h8
12.1.4-h7
12.1.4-h6
11.1.14
11.2.11
12.1.5
10.2.13-h21
10.2.7-h34
11.1.15
11.1.7-h6
11.2.12
11.2.4-h17
12.1.7
10.2.18-h6
10.2.16-h7
10.2.10-h36
11.1.13-h5
11.1.10-h25
11.1.6-h32
11.1.4-h33
11.2.10-h6
11.2.7-h13
12.1.4-h5
10.2.18-h5
10.2.18-h4
10.2.18-h3
10.2.18-h2
10.2.13-h20
10.2.13-h19
10.2.10-h35
10.2.10-h34
10.2.10-h33
10.2.10-h32
10.2.10-h31
10.2.7-h33
11.1.13-h4
11.1.13-h3
11.1.13-h2
11.1.13-h1
11.1.10-h24
11.1.10-h23
11.1.10-h22
11.1.10-h21
11.1.10-h20
11.1.10-h19
11.1.10-h18
11.1.10-h17
11.1.10-h16
11.1.10-h15
11.1.10-h14
11.1.10-h13
11.1.10-h12
11.1.10-h11
11.1.10-h10
11.1.7-h5
11.1.7-h4
11.1.7-h3
11.1.7-h1
11.1.6-h31
11.1.6-h30
11.1.6-h29
11.1.6-h28
11.1.6-h27
11.1.6-h26
11.1.6-h25
11.1.6-h24
11.1.4-h32
11.1.4-h31
11.1.4-h30
11.1.4-h29
11.1.4-h28
11.2.10-h5
11.2.10-h4
11.2.10-h3
11.2.7-h12
11.2.7-h11
11.2.7-h10
11.2.7-h9
11.2.4-h16
12.1.4-h4
12.1.4-h3
12.1.4-h2
12.1.4-h1
11.2.9
10.2.7-h32
10.2.10-h30
10.2.13-h18
10.2.16-h6
10.2.18-h1
11.1.4-h27
11.1.6-h23
11.1.10-h9
11.1.13
11.2.4-h15
11.2.7-h8
11.2.10-h2
12.1.4
10.2.7-h31
10.2.7-h30
10.2.7-h29
10.2.7-h28
10.2.7-h27
10.2.7-h26
10.2.7-h25
10.2.10-h29
10.2.10-h28
10.2.10-h27
10.2.10-h26
10.2.10-h25
10.2.10-h24
10.2.10-h23
10.2.10-h22
10.2.10-h21
10.2.10-h20
10.2.10-h19
10.2.10-h18
10.2.10-h16
10.2.10-h15
10.2.13-h17
10.2.13-h16
10.2.13-h15
10.2.13-h14
10.2.13-h13
10.2.13-h12
10.2.13-h11
10.2.13-h10
10.2.13-h9
10.2.13-h8
10.2.13-h7
10.2.13-h6
10.2.16-h5
10.2.16-h4
10.2.16-h3
10.2.16-h2
10.2.16-h1
10.2.18
11.1.10-h8
11.1.10-h7
11.1.10-h6
11.1.10-h5
11.1.10-h4
11.1.10-h3
11.1.10-h2
11.1.10-h1
11.1.6-h22
11.1.6-h21
11.1.6-h20
11.1.6-h19
11.1.6-h18
11.1.6-h17
11.1.6-h16
11.1.6-h15
11.1.6-h14
11.1.6-h13
11.1.6-h12
11.1.6-h11
11.1.6-h10
11.1.6-h9
11.1.6-h8
11.1.6-h7
11.1.6-h6
11.1.6-h5
11.1.6-h4
11.1.6-h3
11.1.6-h2
11.1.4-h26
11.1.4-h25
11.1.4-h24
11.1.4-h23
11.1.4-h22
11.1.4-h21
11.1.4-h20
11.1.4-h19
11.1.4-h18
11.1.4-h17
11.1.4-h16
11.1.4-h15
11.1.4-h14
11.2.10-h1
11.2.10
11.2.7-h7
11.2.7-h6
11.2.7-h5
11.2.7-h4
11.2.7-h3
11.2.7-h2
11.2.7-h1
11.2.4-h14
11.2.4-h13
11.2.4-h12
11.2.4-h11
11.2.4-h10
11.2.4-h9
11.2.4-h8
11.2.4-h7
11.2.4-h6
11.2.4-h5
12.1.3-h2
12.1.3-h1
12.1.3
12.1.2
12.1.1
10.2.12-h4
11.2.3-h6
11.2.3-h5
11.2.3-h4
11.2.3-h3
11.2.3-h2
11.2.3-h1
11.2.2-h2
11.1.4-h13
11.1.4-h12
11.1.4-h11
11.1.4-h10
11.1.4-h9
11.1.4-h8
11.1.4-h7
11.1.4-h6
11.1.4-h5
11.1.3-h13
11.1.3-h12
11.1.3-h11
11.1.3-h9
11.1.3-h8
11.1.3-h7
11.1.3-h5
11.1.3-h3
11.1.3-h1
11.1.2-h18
11.1.2-h17
11.1.2-h16
11.1.2-h15
11.1.2-h13
11.1.2-h11
11.1.2-h10
10.2.7-h24
10.2.7-h23
10.2.7-h22
10.2.7-h21
10.2.7-h20
10.2.7-h19
10.2.7-h18
10.2.7-h17
10.2.8-h21
10.2.8-h20
10.2.8-h19
10.2.8-h18
10.2.8-h17
10.2.8-h16
10.2.8-h15
10.2.8-h14
10.2.8-h12
10.2.8-h11
10.2.8-h9
10.2.8-h8
10.2.8-h7
10.2.8-h6
10.2.8-h5
10.2.9-h21
10.2.9-h20
10.2.9-h19
10.2.9-h18
10.2.9-h17
10.2.9-h16
10.2.9-h15
10.2.9-h14
10.2.11-h12
10.2.11-h11
10.2.11-h10
10.2.11-h9
10.2.11-h8
10.2.11-h7
10.2.11-h6
10.2.11-h5
10.2.12-h6
10.2.12-h5
10.2.12-h3
11.1.12
10.1.14-h15
11.0.7
10.1.14-h14
10.2.16
11.1.9
11.1.10
11.2.7
11.2.8
11.1.11
10.2.17
11.1.7-h2
10.1.13
10.2.4-h17
10.2.4-h18
10.2.4-h19
10.2.4-h20
10.2.4-h21
10.2.4-h22
10.2.4-h23
10.2.4-h24
10.2.4-h26
10.2.4-h27
10.2.4-h28
10.2.4-h29
10.2.4-h30
10.2.4-h31
10.2.4-h32
10.2.10-h13
10.2.10-h14
10.2.4-h25
10.2.9-h13
10.2.9-h12
10.2.10-h17
11.2.0
11.2.6
10.2.15
10.1.14-h13
10.1.14-h12
11.1.7
11.2.5
11.1.8
10.2.14
10.2.13-h5
10.2.13-h4
10.1.14-h11
10.1.14-h10
10.2.8-h2
10.1.14-h9
10.2.13-h3
11.1.6-h1
11.2.4-h4
11.1.6
11.2.4-h3
11.2.4-h2
12.1
10.1.14-h8
10.1.14-h7
10.2.13-h2
10.2.13-h1
10.2.13
10.2.10-h12
10.2.10-h11
10.2.10-h10
10.2.10-h9
10.2.10-h8
10.2.10-h6
10.2.10-h5
10.2.0-h3
10.2.1-h2
10.2.2-h5
10.2.2-h3
10.2.3-h13
10.2.3-h12
10.2.3-h11
10.2.3-h10
10.2.3-h8
10.2.3-h7
10.2.3-h6
10.2.3-h5
10.2.3-h3
10.2.4-h16
10.2.4-h15
10.2.4-h14
10.2.4-h13
10.2.4-h12
10.2.4-h11
10.2.4-h10
10.2.4-h9
10.2.4-h8
10.2.4-h7
10.2.5-h6
10.2.5-h5
10.2.5-h3
10.2.5-h2
10.2.6-h3
10.2.6-h2
10.2.7-h15
10.2.7-h14
10.2.7-h13
10.2.7-h11
10.2.7-h10
10.2.7-h9
10.2.7-h8
10.2.7-h7
10.2.7-h6
10.2.7-h5
10.2.7-h4
11.0.0-h3
11.0.1-h1
11.0.1-h4
11.0.2-h4
11.0.3-h12
11.0.3-h11
11.0.3-h10
11.0.3-h9
11.0.3-h8
11.0.3-h7
11.0.3-h6
11.0.3-h4
11.0.3-h2
11.0.5-h1
11.1.0-h3
11.1.1-h1
11.1.4-h4
11.1.4-h3
11.1.4-h2
11.1.4-h1
10.1.6-h5
10.1.6-h4
10.1.6-h3
10.1.6-h2
10.1.6-h1
10.2.11-h4
10.2.10-h7
10.2.9-14
10.2.8-h13
10.2.7-h16
11.1.3-h10
11.1.2-h14
11.2.2-h3
11.2.2-h1
11.1.3-h6
11.1.3-h4
11.1.3-h2
11.1.2-h12
10.2.11-h3
10.2.11-h2
10.2.11-h1
10.2.8-h10
10.2.7-h12
10.1.14-h6
10.1.14-h5
10.1.14-h4
10.1.14-h3
10.2.12-h2
10.2.12-h1
10.2.12
11.0.6-h1
11.1.5-h1
11.1.5
11.2.4-h1
11.2.4
10.1.14-h1
10.2.4-h6
10.2.4-h5
10.2.11
10.2.10-h4
10.2.10-h3
10.2.10-h2
10.2.10-h1
10.2.9-h11
10.2.9-h10
10.2.9-h9
10.2.9-h8
10.2.9-h7
10.2.9-h6
10.2.9-h5
10.2.9-h4
10.2.9-h3
10.2.9-h2
11.0.6
11.0.4-h5
11.2.3
11.2.2
10.2.8-h1
11.1.2-h9
11.0.4-h3
11.0.4-h2
10.1.14
11.0.4-h4
10.1.14-h2
10.2.10
11.0.5
11.1.4
11.2.1
10.0.12-h6
9.1.19
10.2.8-h4
11.1.3
11.1.2-h4
11.2
10.2.8-h3
10.2.9-h1
11.0.4-h1
11.1.2-h3
11.1.2-h2
10.1.9-h3
10.1.9-h2
10.1.9-h1
10.2.7-h2
10.1.11-h4
10.1.11-h3
10.1.11-h2
11.0.4
10.2.9
10.2.8
10.2.7-h3
10.2.7-h1
10.2.7
10.2.6-h1
10.2.5-h4
10.2.5-h1
10.2.4-h4
10.2.4-h3
10.2.4-h2
10.2.4-h1
10.2.3-h9
10.2.3-h4
10.2.3-h2
10.2.3-h1
10.2.2-h4
10.2.2-h1
10.2.1-h1
10.2.0-h2
10.2.0-h1
11.1.2-h1
11.1.2
11.1.1
11.1.0-h2
11.1.0-h1
11.1.0
11.0.3-h5
11.0.3-h3
11.0.3-h1
11.0.2-h3
11.0.2-h2
11.0.2-h1
11.0.1-h3
11.0.1-h2
11.0.0-h2
11.0.0-h1
9.1.18
10.1.10-h1
10.0.13
9.0.18
10.1.12
10.1.11-h1
8.1.26-h1
9.0.17-h5
9.0.16-h7
9.0.16-h6
9.1.17-h1
9.1.16-h5
9.1.14-h8
9.1.13-h5
9.1.12-h7
9.1.11-h5
8.1.25-h3
8.1.21-h3
10.0.12-h5
10.0.11-h4
10.0.8-h11
9.0.17-h3
9.0.17-h2
9.1.16-h3
9.1.16-h2
9.1.16-h1
11.0.3
9.1.17
8.1.26
9.0.17-h4
9.1.16-h4
10.0.12-h4
8.1.25-h2
9.0.16-6
10.0.12-h3
10.0.8-h10
10.0.11-h3
9.1.13-h4
8.1.25-h1
9.1.12-h6
9.0.16-h5
9.1.14-h7
9.1.11-h4
9-1-16-h3
10.2.6
11.1
11.0
10.1
10.0
10.1.11
11.0.2
11.0.0
10.2.5
10.1.10
11.0.1
8.1.25
10.0.12-h1
10.2.4
9.0.17-h1
9.1.16
10.0.12
9.0.17
8.1.24-h2
10.1.9
8.1.24-h1
9.1.15-h1
10.2
9.1.15
10.1.8
8.1.24
10.2.3
10.1.7
10.0.11-h1
8.1.23-h1
9.0.16-h3
9.1.14-h4
10.1.6-h6
10.2.2-h2
10.2.2
10.0.11
9.1.14-h1
10.1.6
9.1.14
10.0.10-h1
9.0.16-h2
9.1.13-h3
10.2.1
10.2.0
10.1.5-hf
10.1.5
10.0.10
9.1.13-hf
9.0.16-hf
8.1.23
9.1.13-h1
9.0.16
8.1.22
9.1.13
10.0.9
9.1.12-h4
10.1.4
8.1.21-h1
10.0.8-h8
9.1.12-h3
9.1.12
9.1.11-h2
9.1.3-h1
9.1.2-h1
8.1.20-h1
8.1.15-h3
8.1.14-h2
9.0.14-h3
9.0.9-h1
9.0.14-h4
9.1.11-h3
10.0.8-h4
8.1.21
10.1.3
8.1.20
9.0.15
9.1.11
10.1.2
10.1.1
10.1.0
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
9.0.14
9.1.10
8.1.19
9.0.13
9.1.9
9.1.8
9.1.7
9.1.6
9.0.12
8.1.18
8.1.17
9.0.11
9.1.5
9.1.4
10.0.1
9.0.10
8.1.16
5.0.5
5.0.4
5.0.3
5.0.2
4.1.12
4.1.11
5.0.0-h1
5.0.0
4.1.10
4.1.9
4.1.8-h3
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
3.1.10
4.1.2
4.1.1
4.0.8
4.1.0
3.1.9
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
7.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0
5.1
7.0.5-h2
10.0.0
8.1.15
9.1.3
9.2.0
9.0.9
9.0.8
8.1.14
8.0.21
7.1.26
8.0
9.1.1
9.1.0
9.1.2
9.0.6
9.0.7
8.1.13
9.0
8.1
7.1
9.1
9.0.5-h3
9.0.3-h2
8.1.12
9.0.5
9.0.4
8.0.20
7.1.25
8.1.11
8.1.10
9.0.2-h4
8.1.8-h4
8.0.19-h1
7.1.24-h1
9.0.3
9.0.2
9.0.1
9.0.0
9.0.3-h3
8.1.9-h4
8.1.9
8.1.8-h5
8.1.8
8.1.7
8.1.6-h2
8.1.4-h2
8.1.0
8.0.19
8.0.18
8.0.17
8.0.16
8.0.13
8.0.11-h1
8.0.6-h3
8.0.4-h2
8.0.3-h4
7.1.24
7.1.23
7.1.20
7.1.18
7.1.16
7.1.15
7.1.9-h4
7.1.4-h2
8.1.6
8.1.5
8.0.15
8.0.14
7.1.22
7.1.21
8.1.4
8.1.3
7.1.19
8.0.12
8.1.2
8.1.1
7.1.17
6.1.21
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
7.1.14
7.0.19
6.1.19
8.0.4
8.0.5
7.1.13
7.1.12
7.0.18
7.0.17
8.0.3
8.0.2
8.0.1
8.0.0
7.1.11
7.1.10
7.1.9
7.1.8
7.1.7
7.1.6
7.1.0
7.0.16
7.0.15
7.0.14
7.0.13
7.0.12
6.1.18
6.1.17
6.1.16
6.1.13
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
7.0.10
6.1.14
7.1.5
7.0.11
6.1.15
6.0.15
5.1.13
5.0.20
6.1.12
6.0.14
5.0.19
6.1.0
6.0.x
5.1.12
5.1.x
5.0.x
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
7.1.4
7.1.3
7.1.2
7.0.9
7.0.8
7.0.5
7.0.7
5.1.11
7.1.1
7.0.6
6.1.11
6.0.13
5.0.18
Vulnerabilities (90)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100528 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-9474 |
CWE-78 | High | 10.1.14-h6, 10.2.12-h2, 11.0.6-h1, 11.1.5-h1, 11.2.4-h1 | 15.11.2024 |
SB2024111558 SB2024120609 |
||
| #VU98343 - Improper Privilege Management CVE-2024-9471 |
CWE-269 | Low | 10.1.11, 10.2.8, 11.0.3 | 10.10.2024 |
SB2024101016 |
||
| #VU97293 - Exposure of sensitive information to an unauthorized actor CVE-2024-8687 |
CWE-200 | Low | 8.1.25, 9.0.17, 9.1.16, 10.0.12, 10.1.9, 10.2.4, 11.0.1 | 16.09.2024 |
SB2024091612 |
||
| #VU88504 - Improper input validation CVE-2024-3384 |
CWE-20 | Medium | 8.1.24, 9.0.17, 9.1.15-h1, 10.0.12 | 12.04.2024 |
SB2024041222 |
||
| #VU88502 - NULL Pointer Dereference CVE-2024-3385 |
CWE-476 | Medium | 9.0.17-h4, 9.1.17, 10.1.12, 10.2.8, 11.0.3 | 12.04.2024 |
SB2024041219 |
||
| #VU88498 - Interpretation Conflict CVE-2024-3386 |
CWE-436 | Medium | 9.0.17-h2, 9.1.17, 10.0.13, 10.1.9-h3, 10.1.10, 10.2.4-h2, 10.2.5, 11.0.1-h2, 11.0.2 | 12.04.2024 |
SB2024041217 |
||
| #VU87515 - Improper Privilege Management CVE-2024-2433 |
CWE-269 | Low | 9.0.17-h4, 9.1.17, 10.1.12, 10.2.8, 11.0.3 | 14.03.2024 |
SB2024031408 |
||
| #VU86541 - Insufficient Session Expiration CVE-2024-0008 |
CWE-613 | Low | 9.0.17-h2, 9.0.18, 10.0.12-h1, 10.0.13, 10.1.10-h1, 10.1.11, 10.2.5, 11.0.2 | 15.02.2024 |
SB2024021526 SB2024041513 |
||
| #VU86540 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-0007 |
CWE-79 | Low | 8.1.24-h1, 8.1.25, 9.0.17, 9.1.16, 10.0.11, 10.1.6 | 15.02.2024 |
SB2024021525 |
||
| #VU86538 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-0010 |
CWE-79 | Low | 9.0.17-h4, 9.1.17, 10.1.11-h1, 10.1.12 | 15.02.2024 |
SB2024021523 |
||
| #VU86535 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-0011 |
CWE-79 | Low | 8.1.24, 9.0.17, 9.1.13, 10.0.11, 10.1.3 | 15.02.2024 |
SB2024021522 |
||
| #VU84405 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-6795 |
CWE-78 | Low | 8.1.24-h1, 9.0.17, 9.1.12, 10.0.9, 10.1.3 | 13.12.2023 |
SB2023121399 |
||
| #VU80766 - Improper input validation CVE-2023-38802 |
CWE-20 | Medium | 8.1.26, 9.0.17-h3, 9.1.16-h3, 10.1.11, 10.2.6, 11.0.3 | 13.09.2023 |
SB2023091371 SB2023091372 SB2023091860 and 21 more |
||
| #VU77363 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-0010 |
CWE-79 | Low | 8.1.24, 9.0.17, 9.1.16, 10.0.11, 10.1.6, 10.2.2 | 15.06.2023 |
SB2023061518 |
||
| #VU76004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2023-0008 |
CWE-362 | Low | 8.1.25, 9.0.17, 9.1.16, 10.0.12, 10.1.10, 10.2.4, 11.0.1 | 10.05.2023 |
SB2023051066 SB2024041515 |
||
| #VU76003 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-0007 |
CWE-79 | Low | 8.1.25, 9.0.17, 9.1.16, 10.0.7 | 10.05.2023 |
SB2023051065 |
||
| #VU75046 - Cleartext Storage of Sensitive Information CVE-2023-0005 |
CWE-312 | Low | 8.1.24, 9.0.17, 9.1.15, 10.0.12, 10.1.8, 10.2.3 | 12.04.2023 |
SB2023041262 SB2024041515 |
||
| #VU75045 - Improper Check or Handling of Exceptional Conditions CVE-2023-0004 |
CWE-703 | Low | 8.1.24, 9.0.17, 9.1.15, 10.0.11, 10.1.6 | 12.04.2023 |
SB2023041261 |
||
| #VU66399 - Insufficient Control of Network Message Volume (Network Amplification) CVE-2022-0028 |
CWE-406 | Medium | 8.1.23-h1, 9.0.16-h3, 9.1.14-h4, 10.1.6-h6, 10.2.2-h2 | 11.08.2022 |
SB2022081123 SB2024041515 |
||
| #VU63073 - Improper input validation CVE-2022-0024 |
CWE-20 | Low | 8.1.23, 9.0.16, 9.1.13, 10.0.10, 10.1.5 | 11.05.2022 |
SB2022051126 |
Showing elements 1 - 20 out of 90