Known vulnerabilities in Palo Alto PAN-OS - page 10

Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 254
Public exploits: 20
Known exploited (KEV): 12
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS Palo Alto PAN-OS is affected by 254 known vulnerabilities: 9 critical, 40 high, 76 medium, 129 low Critical High Medium Low

Vulnerabilities (254)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26251 -
CVE-2020-1981
Low
No
No
8.1.13 20.03.2020 SB2020032005
#VU26250 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1980
CWE-78 Low
No
No
8.1.13 20.03.2020 SB2020032005
#VU26249 - Use of Externally-Controlled Format String
CVE-2020-1979
CWE-134 Low
No
No
8.1.13 20.03.2020 SB2020032005
#VU30365 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-1975
CWE-611 High
No
No
9.0.6 13.02.2020 SB2020021343
#VU23777 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2019-17440
CWE-923 High
No
No
9.0.5-h3 20.12.2019 SB2019122022
#VU23404 - Improper Authentication
CVE-2019-17437
CWE-287 Low
No
No
7.1.25, 8.0.20, 8.1.11, 9.0.5 05.12.2019 SB2019120501
SB2021030119
#VU20369 - Memory corruption
CVE-2019-1580
CWE-119 High
No
No
7.1.24-h1, 8.0.19-h1, 8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU20368 - Improper input validation
CVE-2019-1581
CWE-20 High
No
No
7.1.24-h1, 8.0.19-h1, 8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU20367 - Memory corruption
CVE-2019-1582
CWE-119 Low
No
No
8.1.9-h4, 9.0.3-h3 22.08.2019 SB2019082202
#VU19306 - Improper input validation
CVE-2019-1579
CWE-20 Critical
No
Exploited
7.1.19, 8.0.12, 8.1.3 22.07.2019 SB2019072213
#VU35711 - Exposure of sensitive information to an unauthorized actor
CVE-2019-1575
CWE-200 High
No
No
- 16.07.2019 SB2019071629
#VU35712 - Command injection
CVE-2019-1576
CWE-77 High
No
No
9.0.2 16.07.2019 SB2019071627
#VU36037 - Improper Authentication
CVE-2019-1572
CWE-287 Medium
No
No
- 26.03.2019 SB2019032620
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559
CWE-327 Low
No
No
7.1.25, 8.0.20, 8.1.11, 9.0.5 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU17249 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1565
CWE-79 Low
No
No
7.1.22, 8.0.15, 8.1.6 29.01.2019 SB2019012902
#VU17248 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1566
CWE-79 Low
No
No
7.1.22, 8.0.15, 8.1.6 29.01.2019 SB2019012902
#VU15344 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10141
CWE-79 Low
No
No
8.1.4 14.10.2018 SB2018101401
#VU14529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10139
CWE-79 Low
No
No
7.1.19, 8.0.12 22.08.2018 SB2018082705
#VU14530 - Permissions, Privileges, and Access Controls
CVE-2018-10140
CWE-264 Low
No
No
8.1.3 22.08.2018 SB2018082705
#VU13337 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3665
CWE-200 Low
No
No
8.0.18, 8.1.9 14.06.2018 SB2018061401
SB2018061410
SB2018061502
and 16 more


Showing elements 181 - 200 out of 254