Known vulnerabilities in Palo Alto PAN-OS 10.1.14-h10

Version: 10.1.14-h10
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 10.1.14-h10 Palo Alto PAN-OS 10.1.14-h10 is affected by 14 vulnerabilities: 3 high, 3 medium, 8 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121528 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-0227
CWE-754 Medium
No
No
10.2.7-h32, 10.2.10-h30, 10.2.13-h18, 10.2.16-h6, 10.2.18-h1, 11.1.4-h27, 11.1.6-h23, 11.1.10-h9, 11.1.13, 11.2.4-h15, 11.2.7-h8, 11.2.10-h2, 12.1.4 14.01.2026 SB20260114185
#VU111102 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-4230
CWE-78 Low
No
No
10.1.14-h15, 10.2.14, 11.1.10, 11.2.6 12.06.2025 SB2025061231
#VU111101 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-4229
CWE-497 Medium
No
No
10.2.17, 11.1.10 12.06.2025 SB2025061230
#VU109209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0137
CWE-79 Low
No
No
10.1.14-h14, 10.2.13, 11.1.8, 11.2.5 15.05.2025 SB2025051550
#VU109208 - Cleartext Transmission of Sensitive Information
CVE-2025-0136
CWE-319 Medium
No
No
10.1.14-h14, 10.2.11, 11.0.7, 11.1.5 15.05.2025 SB2025051549
#VU107408 - Session Fixation
CVE-2025-0126
CWE-384 High
No
No
10.1.14-h11, 10.2.4-h25, 10.2.9-h13, 10.2.10-h6, 10.2.11, 11.0.6, 11.1.5, 11.2.3 14.04.2025 SB2025041421
#VU107407 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-0128
CWE-754 High
No
No
10.1.14-h11, 10.2.10-h17, 11.0.6, 11.1.5, 11.2.3 14.04.2025 SB2025041419
#VU107406 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-0127
CWE-78 Low
No
No
10.1.14-h13, 10.2.9, 11.0.4 14.04.2025 SB2025041420
#VU107403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0125
CWE-79 Low
No
No
10.1.14-h11, 10.2.11, 11.0.6, 11.1.5, 11.2.5 14.04.2025 SB2025041418
#VU107401 - External Control of File Name or Path
CVE-2025-0124
CWE-73 Low
No
No
10.1.14-h11, 10.2.10, 11.0.6, 11.1.5, 11.2.1 14.04.2025 SB2025041422
#VU107400 - Cleartext Storage of Sensitive Information
CVE-2025-0123
CWE-312 Low
No
No
10.1.14-h13, 10.2.15, 11.1.8, 11.2.6 14.04.2025 SB2025041417
#VU105792 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-0116
CWE-754 Low
No
No
10.1.14-h11, 10.2.13, 10.2.13-h5, 10.2.14, 11.1.8, 11.2.5 17.03.2025 SB2025031751
#VU105791 - Improper Resolution of Path Equivalence
CVE-2025-0115
CWE-41 Low
No
No
10.1.14-h11, 10.2.11, 11.0.6, 11.1.5, 11.2.3 17.03.2025 SB2025031752
#VU105784 - Resource exhaustion
CVE-2025-0114
CWE-400 High
No
No
10.1.14-h11, 10.2.5, 11.0.2 17.03.2025 SB2025031753