Known vulnerabilities in Palo Alto PAN-OS 9.0.5 - page 2

Version: 9.0.5
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 90
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 9.0.5 Palo Alto PAN-OS 9.0.5 is affected by 90 vulnerabilities: 2 critical, 11 high, 33 medium, 44 low Critical High Medium Low

Vulnerabilities (90)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62311 - Improper Handling of Exceptional Conditions
CVE-2022-0023
CWE-755 Medium
No
No
8.1.22, 9.0.16, 10.0.10, 10.1.5 13.04.2022 SB2022041337
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
8.1.23, 9.0.16-hf, 9.1.13-hf, 10.0.10, 10.1.5-hf, 10.2.1 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61214 - Use of Password Hash With Insufficient Computational Effort
CVE-2022-0022
CWE-916 Low
No
No
8.1.21, 9.1.11, 10.0.7 09.03.2022 SB2022030913
#VU60481 - Incorrect Regular Expression
CVE-2022-0011
CWE-185 Medium
No
No
8.1.21, 9.1.12, 10.0.8, 10.1.3 09.02.2022 SB2022020926
#VU58112 - Improper Access Control
CVE-2021-3062
CWE-284 High
No
No
8.1.20, 9.0.14, 9.1.11, 10.0.8 11.11.2021 SB2021111113
#VU58111 - Memory corruption
CVE-2021-3056
CWE-119 Critical
No
No
8.1.20, 9.0.14, 9.1.9, 10.0.1 11.11.2021 SB2021111112
#VU58110 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3061
CWE-78 Low
No
No
8.1.20-h1, 9.0.14-h3, 9.1.11-h2, 10.0.8, 10.1.3 11.11.2021 SB2021111111
#VU58109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3060
CWE-78 High
No
No
8.1.20-h1, 9.0.14-h3, 9.1.11-h2, 10.0.8, 10.1.3 11.11.2021 SB2021111110
#VU58108 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3059
CWE-78 Medium
No
No
8.1.20-h1, 9.0.14-h3, 9.1.11-h2, 10.0.8, 10.1.3 11.11.2021 SB2021111109
#VU58107 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3058
CWE-78 Low
No
No
8.1.20-h1, 9.0.14-h3, 9.1.11-h2, 10.0.8, 10.1.3 11.11.2021 SB2021111108
#VU58106 - Improper Handling of Exceptional Conditions
CVE-2021-3063
CWE-755 Medium
No
No
8.1.21, 9.0.14-h4, 9.1.11-h3, 10.0.8-h4, 10.1.3 11.11.2021 SB2021111107
#VU56409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3052
CWE-79 Medium
No
No
8.1.20, 9.0.14, 9.1.10, 10.0.2 08.09.2021 SB2021090817
#VU56408 - Improper Handling of Exceptional Conditions
CVE-2021-3053
CWE-755 Medium
No
No
8.1.20, 9.0.14, 9.1.9, 10.0.5 08.09.2021 SB2021090818
#VU56407 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-3054
CWE-367 Low
No
No
8.1.20, 9.0.14, 9.1.11, 10.0.7, 10.1.2 08.09.2021 SB2021090819
#VU56406 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-3055
CWE-611 Low
No
No
8.1.20, 9.0.14, 9.1.10, 10.0.6 08.09.2021 SB2021090820
#VU55823 - Improper input validation
CVE-2021-3048
CWE-20 Medium
No
No
9.0.14, 9.1.9, 10.0.5 12.08.2021 SB2021081224
#VU55822 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-3047
CWE-338 Low
No
No
8.1.19, 9.0.14, 9.1.10, 10.0.4 12.08.2021 SB2021081223
#VU55821 - Improper Authentication
CVE-2021-3046
CWE-287 Medium
No
No
8.1.19, 9.0.14, 9.1.9, 10.0.5 12.08.2021 SB2021081222
#VU46573 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1968
CWE-200 Medium
No
No
10.0.0 10.09.2020 SB2020091011
SB2020121720
SB2021012078
and 22 more
#VU26625 - Memory corruption
CVE-2020-10188
CWE-119 High
No
No
8.1.20, 9.0.14, 9.1.9, 10.0.6 07.04.2020 SB2020030621
SB2020040704
SB2020040705
and 20 more


Showing elements 21 - 40 out of 90