Known vulnerabilities in Palo Alto PAN-OS - page 11

Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 258
Public exploits: 20
Known exploited (KEV): 12

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS Palo Alto PAN-OS is affected by 258 known vulnerabilities: 9 critical, 41 high, 76 medium, 132 low Critical High Medium Low

Vulnerabilities (258)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17249 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1565
CWE-79 Low
No
No
7.1.22, 8.0.15, 8.1.6 29.01.2019 SB2019012902
#VU15344 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10141
CWE-79 Low
No
No
8.1.4 14.10.2018 SB2018101401
#VU14529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10139
CWE-79 Low
No
No
7.1.19, 8.0.12 22.08.2018 SB2018082705
#VU14530 - Permissions, Privileges, and Access Controls
CVE-2018-10140
CWE-264 Low
No
No
8.1.3 22.08.2018 SB2018082705
#VU13869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9335
CWE-79 Low
No
No
6.1.21, 7.1.17, 8.0.10, 8.1.2 14.07.2018 SB2018071310
SB2024080238
#VU13868 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9337
CWE-79 Low
No
No
6.1.21, 7.1.17, 8.0.10, 8.1.2 14.07.2018 SB2018071310
SB2024080238
#VU13863 - Exposure of sensitive information to an unauthorized actor
CVE-2018-9334
CWE-200 Low
No
No
6.1.21, 7.1.17, 8.0.9, 8.1.1 13.07.2018 SB2018071310
SB2024080238
#VU13862 - Improper input validation
CVE-2018-9242
CWE-20 Low
No
No
6.1.21, 7.1.17, 8.0.10 10.07.2018 SB2018071310
SB2024080238
#VU13515 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-7636
CWE-79 Low
No
No
8.0.11 28.06.2018 SB2018062906
#VU37693 - Improper input validation
CVE-2017-17841
CWE-20 Medium
No
No
- 10.01.2018 SB2018011050
#VU31364 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15941
CWE-79 Low
No
No
8.0.7 10.01.2018 SB2018011030
#VU31365 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-16878
CWE-79 Low
No
No
8.0.7 10.01.2018 SB2018011030
#VU9665 - Server-Side Request Forgery (SSRF)
CVE-2017-15943
CWE-918 Low
No
No
- 18.12.2017 SB2017121504
#VU9664 - Command injection
CVE-2017-15940
CWE-77 High
No
No
- 18.12.2017 SB2017121504
#VU9663 - Improper Access Control
CVE-2017-15942
CWE-284 Low
No
No
- 18.12.2017 SB2017121504
#VU9662 - Command injection
CVE-2017-15944
CWE-77 High
Available
Exploited
- 18.12.2017 SB2017121504
#VU8077 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-9458
CWE-611 Low
No
No
- 04.09.2017 SB2017090402
#VU8076 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12416
CWE-79 Low
No
No
- 01.09.2017 SB2017090402
#VU7587 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-9467
CWE-79 Low
No
No
- 25.07.2017 SB2017072503
#VU7586 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-9459
CWE-79 Low
No
No
- 21.07.2017 SB2017072503


Showing elements 201 - 220 out of 258