Known vulnerabilities in Palo Alto PAN-OS 7.1.19 - page 2

Version: 7.1.19
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 36
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 7.1.19 Palo Alto PAN-OS 7.1.19 is affected by 36 vulnerabilities: 1 critical, 4 high, 12 medium, 19 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27903 - Session Fixation
CVE-2020-1993
CWE-384 Medium
No
No
8.1.14, 9.0.8 14.05.2020 SB2020051401
#VU27900 - Improper Authorization
CVE-2020-1996
CWE-285 Medium
No
No
8.1.14, 9.0.9 14.05.2020 SB2020051401
#VU27898 - Improper Authorization
CVE-2020-1998
CWE-285 Low
No
No
7.1.26, 8.1.13, 9.0.6, 9.1.1 14.05.2020 SB2020051401
#VU27897 - Unrestricted Upload of File with Dangerous Type
CVE-2020-2001
CWE-434 High
No
No
8.1.12, 9.0.6 14.05.2020 SB2020051401
#VU27896 - Improper Authentication
CVE-2020-2002
CWE-287 Medium
No
No
7.1.26, 8.1.13, 9.0.6 14.05.2020 SB2020051401
#VU27895 - Improper Access Control
CVE-2020-2003
CWE-284 Low
No
No
8.1.14, 9.0.7, 9.1.1 14.05.2020 SB2020051401
#VU27884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2017
CWE-79 Low
No
No
7.1.26, 8.1.13, 9.0.6 14.05.2020 SB2020051401
#VU27883 - Improper Authentication
CVE-2020-2018
CWE-287 Medium
No
No
7.1.26, 8.0.21, 8.1.12, 9.0.6 14.05.2020 SB2020051401
#VU23404 - Improper Authentication
CVE-2019-17437
CWE-287 Low
No
No
7.1.25, 8.0.20, 8.1.11, 9.0.5 05.12.2019 SB2019120501
SB2021030119
#VU20369 - Memory corruption
CVE-2019-1580
CWE-119 High
No
No
7.1.24-h1, 8.0.19-h1, 8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU20368 - Improper input validation
CVE-2019-1581
CWE-20 High
No
No
7.1.24-h1, 8.0.19-h1, 8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559
CWE-327 Low
No
No
7.1.25, 8.0.20, 8.1.11, 9.0.5 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU17249 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1565
CWE-79 Low
No
No
7.1.22, 8.0.15, 8.1.6 29.01.2019 SB2019012902
#VU17248 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1566
CWE-79 Low
No
No
7.1.22, 8.0.15, 8.1.6 29.01.2019 SB2019012902
#VU13337 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3665
CWE-200 Low
No
No
8.0.18, 8.1.9 14.06.2018 SB2018061401
SB2018061410
SB2018061502
and 16 more
#VU7410 - Integer overflow
CVE-2017-7529
CWE-190 Medium
Public exploit available
No
7.1.26, 8.1.13, 9.0.6 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more


Showing elements 21 - 40 out of 36