Known vulnerabilities in Palo Alto PAN-OS 9.0.1 - page 5

Version: 9.0.1
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 95
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 9.0.1 Palo Alto PAN-OS 9.0.1 is affected by 95 vulnerabilities: 2 critical, 14 high, 33 medium, 46 low Critical High Medium Low

Vulnerabilities (95)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27897 - Unrestricted Upload of File with Dangerous Type
CVE-2020-2001
CWE-434 High
No
No
8.1.12, 9.0.6 14.05.2020 SB2020051401
#VU27896 - Improper Authentication
CVE-2020-2002
CWE-287 Medium
No
No
7.1.26, 8.1.13, 9.0.6 14.05.2020 SB2020051401
#VU27895 - Improper Access Control
CVE-2020-2003
CWE-284 Low
No
No
8.1.14, 9.0.7, 9.1.1 14.05.2020 SB2020051401
#VU27894 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2005
CWE-79 Medium
No
No
7.1.26, 8.1.13, 9.0.7 14.05.2020 SB2020051401
#VU27890 - Unrestricted Upload of File with Dangerous Type
CVE-2020-2009
CWE-434 Medium
No
No
8.1.14, 9.0.7 14.05.2020 SB2020051401
#VU26742 - Use of Externally-Controlled Format String
CVE-2020-1992
CWE-134 High
No
No
9.0.7, 9.1.2 09.04.2020 SB2020040909
#VU26741 - Stack-based buffer overflow
CVE-2020-1990
CWE-121 Medium
No
No
8.1.13, 9.0.7 09.04.2020 SB2020040908
#VU30365 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-1975
CWE-611 High
No
No
9.0.6 13.02.2020 SB2020021343
#VU23777 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2019-17440
CWE-923 High
No
No
9.0.5-h3 20.12.2019 SB2019122022
#VU23404 - Improper Authentication
CVE-2019-17437
CWE-287 Low
No
No
7.1.25, 8.0.20, 8.1.11, 9.0.5 05.12.2019 SB2019120501
SB2021030119
#VU20369 - Memory corruption
CVE-2019-1580
CWE-119 High
No
No
7.1.24-h1, 8.0.19-h1, 8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU20368 - Improper input validation
CVE-2019-1581
CWE-20 High
No
No
7.1.24-h1, 8.0.19-h1, 8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU20367 - Memory corruption
CVE-2019-1582
CWE-119 Low
No
No
8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU35712 - Command injection
CVE-2019-1576
CWE-77 High
No
No
9.0.2 16.07.2019 SB2019071627
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559
CWE-327 Low
No
No
7.1.25, 8.0.20, 8.1.11, 9.0.5 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more


Showing elements 81 - 100 out of 95