Known vulnerabilities in Palo Alto PAN-OS - page 12

Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 254
Public exploits: 20
Known exploited (KEV): 12
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS Palo Alto PAN-OS is affected by 254 known vulnerabilities: 9 critical, 40 high, 76 medium, 129 low Critical High Medium Low

Vulnerabilities (254)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU39469 - Exposure of sensitive information to an unauthorized actor
CVE-2017-5583
CWE-200 Medium
No
No
- 15.03.2017 SB2017031532
#VU39470 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-5584
CWE-79 Low
No
No
- 15.03.2017 SB2017031533
#VU31449 - Permissions, Privileges, and Access Controls
CVE-2016-9151
CWE-264 Low
Available
No
7.1.6 19.11.2016 SB2016111903
#VU31450 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-9150
CWE-94 High
Available
No
7.1.6 19.11.2016 SB2016111903
#VU31451 - Data Handling
CVE-2016-9149
CWE-19 Medium
No
No
7.1.6 19.11.2016 SB2016111903
#VU1133 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 01.11.2016 SB2016110129
#VU1134 - Improper Authentication
CWE-287 Low
No
No
- 01.11.2016 SB2016110130
#VU1042 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 20.10.2016 SB2016102007
SB2024072241
#VU945 - NULL Pointer Dereference
CVE-2014-9708
CWE-476 Medium
No
No
- 13.10.2016 SB2015033104
#VU781 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 06.10.2016 SB2016100610
#VU173 - Improper input validation
CVE-2016-1712
CWE-20 Critical
Available
No
- 19.07.2016 SB2016071918
#VU172 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 High
No
No
- 19.07.2016 SB2016071917
#VU171 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
- 19.07.2016 SB2016071916
#VU40174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2219
CWE-79 Low
Available
No
- 12.07.2016 SB2016071236
#VU40727 - Improper input validation
CVE-2015-4162
CWE-20 Low
No
No
- 02.06.2015 SB2015060203
#VU40966 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3764
CWE-79 Low
No
No
- 06.01.2015 SB2015010602
#VU42610 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-6604
CWE-78 Medium
No
No
- 31.08.2013 SB2013083116
#VU42611 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-6605
CWE-78 Medium
No
No
- 31.08.2013 SB2013083117
#VU42612 - Permissions, Privileges, and Access Controls
CVE-2013-5663
CWE-264 Medium
No
No
- 31.08.2013 SB2013083118
#VU42613 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5664
CWE-79 Low
No
No
- 31.08.2013 SB2013083119


Showing elements 221 - 240 out of 254